korsygfhrtzangaiide
Elepffwdsff
/
usr
/
share
/
authconfig
/
Upload FileeE
HOME
� �8�Yc ; @ s d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Td d l Z d d l Z e j Z y d d l a Wn e k r d a n Xd Z d Z d Z d Z d Z d Z d Z d Z d Z! d Z" d Z# d Z$ d e% e& � d � k r�d Z' n d Z' e' d Z( d Z) d Z* d Z+ d Z, d Z- d Z. d Z/ d Z0 d Z1 d Z2 d Z3 e' d Z4 e' d Z5 e j6 j7 e5 � se' d Z5 n e' d! Z8 e' d" Z9 e' d# Z: e' d$ Z; e' d% Z< e' d& Z= e( d' Z> e( d( Z? e( d) Z@ e( d* ZA e( d+ ZB e( d, ZC e' d- ZD d. ZE d/ ZF d0 ZG d1 ZH d2 ZI d3 ZJ e d4 ZK d5 ZL d6 ZM d7 ZN d8 ZO d9 ZP d: ZQ d; ZR d< ZS d= ZT d> ZU d? ZV d@ ZW dA ZX dB ZY dC � ZZ dD � Z[ dE � Z\ dF � Z] dG � Z^ dH � Z_ dI � Z` dJ � Za dK � Zb dL � Zc dM � Zd dN � Ze dO � Zf dP � Zg dQ � Zh dR � Zi dS � Zj dT g Zk dT dU g Zl dV g Zm dV g Zn dT dW dX dY g Zo dZ g Zp dV g Zq dU g Zr g Zs d[ g Zt d[ d\ g Zu d] g Zv dV g Zw dV d^ g Zx dU g Zy dV g Zz dU g Z{ dV g Z| d_ d` da g Z} db d` dc g Z~ dd dc de g Z df dc de g Z� dV g Z� dU g Z� dV g Z� dU g Z� dg g Z� dh g Z� dh g Z� dh g Z� di dj dc g Z� dk dl g Z� dm dn dl g Z� do g Z� dp dq dr ds dt g Z� e� du dv � \ Z� Z� Z� Z� dw dx dy dz g Z� e� du d{ � \ Z� Z� Z� Z� Z� e� du d{ � \ Z� Z� Z� Z� Z� g e� e� e� e� e� f D] Z� g ^ q�Z� e� e� eL d| g g e� e� eL d} e� g e� e� eL d~ d dm g g e� e� eV d� e� g e� e� eR d� et g e� e� eO d� ex g e� e� eN d� g g e� e� eN d� g g e� e� eY d� e} g e� e� eY d� g g e� e� eN d� ek g e� e� eM d� e} g e� e� eN d� e� g e� e� eN d� em g e� e� eN d� em g e� e� eN d� eq g e� e� eN d� ew g e� e� eN d� ez g e� e� eN d� e| g e� e� eN d� e� g e� e� eL d~ d� g g e� e� eL d� g g e� e� eL d� g g e� e� eL d~ g g e� e� eL d� g g e� e� eN d� g g e� e� eN d� e~ g e� e� eP d� g g e� e� eP d� g g e� e� eP d� g g e� e� eP d� g g e� e� eL d� g g e� e� eM d� eo g e� e� eM d� ep g e� e� eN d� el g e� e� eN d� e� g e� e� eN d� en g e� e� eN d� en g e� e� eN d� er g e� e� eN d� ey g e� e� eN d� e{ g e� e� eN d� e� g e� e� eL d� g g e� e� eO d� e� g e� e� eL d� g g e� e� eO d� g g e� e� eO d� g g e� e� eV d� e g e� e� eL d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g g7 e� e� <e� e� eO d� e� g e� e� eO d� e� g e� e� eO d� e� g e� e� eV d� e� g e� e� eX d� e� g e� e� eO d� e� g g e� e� <e� e� eL d| g g e� e� eL d} e� g e� e� eL d~ d dm g g e� e� eL d� g g e� e� eY d� e} g e� e� eY d� g g e� e� eN d� ek g e� e� eM d� e} g e� e� eN d� e� g e� e� eN d� em g e� e� eN d� em g e� e� eN d� eq g e� e� eN d� ew g e� e� eN d� ez g e� e� eN d� e| g e� e� eN d� e� g e� e� eL d� g g e� e� eL d� g g e� e� eL d~ g g e� e� eL d� g g e� e� eN d� g g e� e� eN d� e~ g e� e� eP d� g g e� e� eP d� g g e� e� eP d� g g e� e� eP d� g g e� e� eL d� g g e� e� eM d� eo g e� e� eM d� ep g e� e� eN d� el g e� e� eN d� e� g e� e� eN d� en g e� e� eN d� en g e� e� eN d� er g e� e� eN d� ey g e� e� eN d� e{ g e� e� eN d� e� g e� e� eL d~ d� g g e� e� eL d� g g e� e� eO d� e� g e� e� eL d� g g e� e� eO d� g g e� e� eO d� g g e� e� eV d� e g e� e� eL d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g g3 e� e� <e� e� eL d| g g e� e� eL d~ d dm g g e� e� eL d� g g e� e� eN d� g g e� e� eL d~ d� g g e� e� eL d� g g e� e� eL d� g g e� e� eL d~ g g e� e� eL d� g g e� e� eN d� g g e� e� eN d� e~ g e� e� eP d� g g e� e� eP d� g g e� e� eP d� g g e� e� eP d� g g e� e� eL d� g g e� e� eL d� g g e� e� eO d� e� g e� e� eL d� g g e� e� eO d� g g e� e� eO d� g g e� e� eV d� e g e� e� eL d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g g e� e� <e� e� eL d| g g e� e� eL d~ d dm g g e� e� eN d� ev g e� e� eR d� eu g e� e� eO d� ex g e� e� eN d� g g e� e� eL d~ d� g g e� e� eL d� g g e� e� eL d� g g e� e� eL d~ g g e� e� eL d� g g e� e� eN d� g g e� e� eN d� e~ g e� e� eP d� g g e� e� eP d� g g e� e� eP d� g g e� e� eP d� g g e� e� eL d� g g e� e� eL d� g g e� e� eO d� e� g e� e� eL d� g g e� e� eO d� g g e� e� eO d� g g e� e� eV d� e g e� e� eL d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g e� e� eO d� g g g e� e� <d� � Z� d� Z� e j� d� � Z� e j� d� � Z� d� d� d� � � YZ� d� d� d� � � YZ� y. d� e j� d� � k r�e� � Z� n e� � Z� Wn e� k r�e� � Z� n Xd� � Z� d� � Z� d� � Z� d� � Z� d� � Z� d� � Z� d� � Z� d� � Z� d� d� d� � � YZ� d� d d� � � YZ� d� dd� � � YZ� d� � Z� d� � Z� d� e� f d� � � YZ� e� du d� � \ Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� Z� e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� d� � e� d e d� e � e� d e d� e � e� d e d� e � e� d e d� e! � e� d e d� e# � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� eK � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � e� d� e d� � g Z� dddddddd d d g Z� d� d d� � � YZ� d S( i����N( t *s /etcs system-auths system-auth-act postlogins postlogin-acs password-auths password-auth-acs fingerprint-auths fingerprint-auth-acs smartcard-auths smartcard-auth-act defaultt lib64t acutils /usr/lib64s /usr/libs /securitys /usr/sbin/pwconvs /sbin/rpcbinds /usr/sbin/nscds /usr/sbin/nslcds /usr/sbin/winbindds /usr/sbin/sssds /usr/sbin/ypbinds /usr/sbin/oddjobds /usr/sbin/setsebools /usr/bin/pkcs11_eventmgrs /usr/bin/pkcs11_setups /libnss_db.so.2s /libnss_ldap.so.2s /libnss_nis.so.2s /libnss_hesiod.so.2s /libnss_odbcbind.so.2s /libnss_winbind.so.2s /libnss_wins.so.2s /libnss_sss.so.2s /pam_krb5.sos /pam_ldap.sos /pam_winbind.sos /pam_pkcs11.sos /pam_fprintd.sos /pam_sss.sos /sssd/modules/libsss_autofs.sos$ /var/lib/sss/pubconf/krb5.include.d/s /usr/bin/nets /usr/sbin/ipa-client-installs /etc/openldap/cacertss authconfig_downloaded.pems /var/lib/authconfigs /sssd/sssd.conft requiredt requisitet sufficientt optionals, [default=bad success=ok user_unknown=ignore]sJ [default=bad success=ok auth_err=ignore user_unknown=ignore ignore=ignore]s@ [success=done authinfo_unavail=ignore ignore=ignore default=die]s( [success=done ignore=ignore default=die]s4 [success=ok authinfo_unavail=2 ignore=2 default=die]s! [success=ok ignore=2 default=die]s [success=1 default=ignore]s [success=3 default=ignore]s [default=1]s$ [default=1 ignore=ignore success=ok]c C s | j d d � d j � S( Ns i i ( t splitt rstrip( t s( ( s! /usr/share/authconfig/authinfo.pyt snipString� s c C s; | s | S| j d d � } d j t d | j d � � � S( Ns t t ,( t replacet joint filtert NoneR ( t lstR ( ( s! /usr/share/authconfig/authinfo.pyt cleanList� s c C s+ | j | � r# | t | � j � St Sd S( N( t startswitht lent lstript False( t linet key( ( s! /usr/share/authconfig/authinfo.pyt matchKey� s c C s5 | j | � r- | t | � j t j d � St Sd S( Nt =( R R R t stringt whitespaceR ( R R ( ( s! /usr/share/authconfig/authinfo.pyt matchKeyEquals� s c C s | j | � S( N( R ( R R ( ( s! /usr/share/authconfig/authinfo.pyt matchLine� s c C s | j � j | j � � S( N( t lowerR ( R R ( ( s! /usr/share/authconfig/authinfo.pyt matchLineI� s c C s | r | d | S| Sd S( NR ( ( R t value( ( s! /usr/share/authconfig/authinfo.pyt commaAppend� s c C sN | r | r t S| s | r$ t S| r4 | | k S| j � | j � k Sd S( N( R t TrueR! ( t at bt case_sensitive( ( s! /usr/share/authconfig/authinfo.pyt stringsDiffer� s c C sF | j � j d d � } t | � d k r. t Sd | d k rB t St S( NR i i R i ( R R R R R% ( R# R ( ( s! /usr/share/authconfig/authinfo.pyt checkDN� s c C s' t | | � } | r t | � St Sd S( N( R R* R ( R R R# ( ( s! /usr/share/authconfig/authinfo.pyt matchBaseLine� s c C s� | j d d � } t | � d k r1 | d } n d } t | � } x� t r� | j | | � } | d k rn d S| d k r� | | d j � r� | | 7} qF n | | t | � k r� | | | j � r� | | 7} qF n | SWd S( Nt :i i ( R R R% t findR t isalnum( t configurationt candidateR t startt clen( ( s! /usr/share/authconfig/authinfo.pyt checkNSS� s" * c C s� d } yQ t j | | | � } | t j k rC t j | t j � n t j | t j � Wn\ t k r� \ } } | d k r� y t j | � Wq� t k r� q� Xn t | | � � n X| S( N( R t ost opent O_RDONLYt fcntlt lockft LOCK_SHt LOCK_EXt OSErrort closet IOError( t filenamet modet permst fdt errnot strerr( ( s! /usr/share/authconfig/authinfo.pyt openfdLocked� s c C s& t j t | t j t j B| � d � S( Ns r+( R4 t fdopenRD t O_RDWRt O_CREAT( R> R@ ( ( s! /usr/share/authconfig/authinfo.pyt openLocked� s c C sE d } | j d � } x) | D]! } | r | d | d 7} q q W| S( Nt R s kdc = s ( R ( t kdclistt outputt kdc( ( s! /usr/share/authconfig/authinfo.pyt krbKdc� s c C sK d } | j d � } x/ | D]' } | r | d 7} | | d 7} q q W| S( NRI R s admin_server = s ( R ( t adminserversRK t adminserver( ( s! /usr/share/authconfig/authinfo.pyt krbAdminServer� s c C sO d } | rK | d | d 7} | t | � 7} | t | � 7} | d 7} n | S( NRI R s = { s } ( RM RP ( t realmRJ RN RK ( ( s! /usr/share/authconfig/authinfo.pyt krbRealm s c C s� | j d d � } t | � d k r- d } n | d } | d j � j d � } | j � j d � } | | k r� | j t j d � St S( NR i i RI i ( R R R! R R R R R ( R R t linelstt paramt keylst( ( s! /usr/share/authconfig/authinfo.pyt matchLineSMB s t try_first_passt use_authtokt use_first_passt local_users_onlys retry=3s authtok_type=s enforce=userst nodebugt wait_for_cardt allow_missing_namet no_subsequent_prompts uid >=t 500t quiet_successs uid <t quiets service in crondt use_uidsK service notin login:gdm:xdm:kdm:xscreensaver:gnome-screensaver:kscreensavert revoket unwraps service !~ gdm*s service !~ su*t nowtmpt showfailedt silentt noupdates delay=2000000t descryptt bigcryptt md5t sha256t sha512i i t autht accountt sessiont passwordi t envt faildelayt faillockt preautht succeed_ift pkcs11t krb5t permitt fprintdt localusert unixt ssst afss afs.krbt eps_autht ldapt otpt winbindt authfailt denyt accesst pwqualityt passwdqct eps_passwdt keyinitt limitst systemdt mkhomedirt ecryptfst lastlogc C s/ d } | j d � } | | j d d � 7} | S( Ns DC=t .s ,DC=( R R ( t domainRK ( ( s! /usr/share/authconfig/authinfo.pyt domain2dnC s i s7 ^[ \t]*([^ \t]+)[ \t][ \t"]*(([^"]*)".*|([^"]*\S)?\s*)$s& ^.*[ \t]*uid[ \t]+(<|>=)[ \t]+([0-9]+)t SysVInitServicec B s> e Z d � Z d � Z d � Z d � Z d � Z d � Z RS( c C s t j d | d � d S( Ns /sbin/service s start( R4 t system( t selft service( ( s! /usr/share/authconfig/authinfo.pyR1 W s c C s t j d | d � d S( Ns /sbin/service s stop >/dev/null 2>&1( R4 R� ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyt stopZ s c C s* t j d | � t j d | d � d S( Ns /sbin/chkconfig --add s /sbin/chkconfig --level 345 s on( R4 R� ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyt enable] s c C s t j d | d � d S( Ns /sbin/chkconfig --level 345 s off( R4 R� ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyt disablea s c C s9 t j d | d � } t j | � o8 t j | � d k S( Ns /sbin/chkconfig s >/dev/null 2>&1i ( R4 R� t WIFEXITEDt WEXITSTATUS( R� R� t rv( ( s! /usr/share/authconfig/authinfo.pyt isEnabledd s c C s t j d | d � d S( Ns /sbin/service s condrestart >/dev/null 2>&1( R4 R� ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyt tryRestarth s ( t __name__t __module__R1 R� R� R� R� R� ( ( ( s! /usr/share/authconfig/authinfo.pyR� V s t SystemdServicec B s> e Z d � Z d � Z d � Z d � Z d � Z d � Z RS( c C s t j d | d � d S( Ns /bin/systemctl start s .service( R4 R� ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR1 l s c C s t j d | d � d S( Ns /bin/systemctl stop s .service >/dev/null 2>&1( R4 R� ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� o s c C s t j d | d � d S( Ns /bin/systemctl enable s .service >/dev/null 2>&1( R4 R� ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� r s c C s t j d | d � d S( Ns /bin/systemctl disable s .service >/dev/null 2>&1( R4 R� ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� u s c C s9 t j d | d � } t j | � o8 t j | � d k S( Ns /bin/systemctl is-enabled s .service >/dev/null 2>&1i ( R4 R� R� R� ( R� R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� x s c C s t j d | d � d S( Ns /bin/systemctl try-restart s .service >/dev/null 2>&1( R4 R� ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� | s ( R� R� R1 R� R� R� R� R� ( ( ( s! /usr/share/authconfig/authinfo.pyR� k s s /sbin/initc C s� | r^ yA t j | � t j | � | sF t j | � t j | � n Wq� t k rZ q� Xn` yL t j | � | s� y t j | � Wq� t k r� q� Xn t j | � Wn t k r� n Xt S( N( R4 t statt ServiceR� R� R1 R; R� R% ( R� t patht namet nostart( ( s! /usr/share/authconfig/authinfo.pyt toggleSplatbindService� s( c C s | r d Sd Sd S( Nt enabledt disabled( ( t val( ( s! /usr/share/authconfig/authinfo.pyt formatBool� s c C s� y t j � \ } } Wn t k r* d SX| s� | rO t | g d t �} n5 t | g d t d t �} | j d | p| d d � | j � | j } t j | � n d \ } } y7 t j | t j � } t j | t j | t j @� Wn t k r� n Xt } xk| sqy7 g } g } t j | g g | g d � \ } } } Wn4 t j k rz\ } } t j j d | d � n X| r�| r�t j | � t } qn d } y t j | d � } Wn� t k rM\ } } | t j k sG| t j k r�q| t j k r t j | � t } qt j j d | d � t j | � t } qn X| r[y� | | 7} | | 7} | r�t j j | � n | r| | k r| j d � } t j | | p�d � t j | d � | d k r�d | | } n d } d } | rt j j d � qn Wqnt k rW\ } } t j j d | d � t j | � t } qnXqt j | � t } qWy t j | t j � Wn t k r�n Xd } y t j | d � \ } } Wn1 t k r�\ } } t j j d | d � n X| | f S( Ni� t shellt stdint inputRI s i< s select: i s read: s i����s <...> s write: i s waitpid: ( RI RI ( R4 t forkptyR; t PopenR% t PIPEt communicatet waitt returncodet _exitR7 t F_GETFLt F_SETFLt O_NONBLOCKR= R t selectt errort syst stderrt writeR< t readRB t EINTRt EAGAINt EIOt rfindt killt signalt SIGTERMt waitpid( t commandt echot queryt responset pidt mastert childt statusRK R� t it eoft ifdst efdst ofdst errt textt ct index( ( s! /usr/share/authconfig/authinfo.pyt feedFork� s� " + c C s� y t j | � } Wn t k r' t SXxS | D]K } y1 t j | d | � } t j | j � re t SWq/ t k ry q/ Xq/ Wt S( Nt /( R4 t listdirR; R% R� t S_ISREGt st_modeR ( R� R R> t st( ( s! /usr/share/authconfig/authinfo.pyt isEmptyDir� s c C s| yc t t g | d t �} | j � d j d � } | j d k rH d S| d d k rb | d 3n Wn t k rw d SX| S( Nt stdouti s i����RI ( R� t PATH_SCSETUPR� R� R R� R R; ( t optionsR� R ( ( s! /usr/share/authconfig/authinfo.pyt callPKCS11Setup s c C s# t d g � } | d k r g S| S( Nt list_modules( R� R ( t mods( ( s! /usr/share/authconfig/authinfo.pyt getSmartcardModules s c C s t d � t d � g S( Nt Lockt Ignore( t _( ( ( s! /usr/share/authconfig/authinfo.pyt getSmartcardActions s c C s t | � } | j � | S( N( t AuthInfoR� ( t msgcbt info( ( s! /usr/share/authconfig/authinfo.pyR� # s t SaveGroupc B s e Z d � Z d � Z RS( c C s | | _ | | _ | | _ d S( N( t saveFunctiont toggleFunctiont attrlist( R� t savefunct togglefuncR� ( ( s! /usr/share/authconfig/authinfo.pyt __init__) s c C s� x� | j D]� \ } } | | j k r) t S| d k rZ t | | � t | | � k r� t Sq | d k r� t t | | � t | | � t � r� t Sq | d k r t t | | � t | | � t � r� t Sq q Wt S( NR' R� R� ( R� t inconsistentAttrsR% t getattrR) R ( R� R& R' t anamet atype( ( s! /usr/share/authconfig/authinfo.pyt attrsDiffer. s $ $ ( R� R� R� R� ( ( ( s! /usr/share/authconfig/authinfo.pyR� ( s t SafeFilec B s5 e Z d � Z d � Z d � Z d � Z d � Z RS( c C s� t j j | � \ } } t | _ t j d | d | d t � | _ t d d | | j j g d t j d t j � �d k r� t | _ t j | j j � | � n | | _ d S( Nt dirt prefixt deletes /bin/cps -afR� s /dev/nulli ( R4 R� R R t missingt tempfilet NamedTemporaryFileR% t filet callR� R5 t O_WRONLYt fchmodt filenoR> ( R� R> t default_modet baseR� ( ( s! /usr/share/authconfig/authinfo.pyR� > s ! c C st | j j � t j | j j � � t j | j j | j � | j rp t d | j g d t j d t j � �n d S( Ns /usr/sbin/restoreconR� s /dev/null( R� t flushR4 t fsyncR t renameR� R> R� R R5 R ( R� ( ( s! /usr/share/authconfig/authinfo.pyt saveJ s c C s) y | j j � Wn t k r$ n Xd S( N( R� R< R; ( R� ( ( s! /usr/share/authconfig/authinfo.pyR< R s c C s | j j | � S( N( R� R� ( R� R ( ( s! /usr/share/authconfig/authinfo.pyR� Y s c C s$ | j j d � | j j d � d S( Ni ( R� t seekt truncate( R� ( ( s! /usr/share/authconfig/authinfo.pyt rewind\ s ( R� R� R� R R< R� R ( ( ( s! /usr/share/authconfig/authinfo.pyR� = s t FileBackupc B s, e Z d � Z d � Z d � Z d � Z RS( c C s | | _ | | _ d S( N( t backupNamet origPath( R� t backupnamet origpath( ( s! /usr/share/authconfig/authinfo.pyR� a s c C s� t } d } d } y t | t j d � } Wn t k r? t SXy t j t j | � j � } Wn% t t f k r� t j | � t SXy t | | � } | j � Wn t k r� t } n XyL xE | rt j | d � } | s� t } Pn t j | j j � | � q� WWn t t f k r)t } n Xy | rCt j | � n Wn t t f k r]n Xy' | r�| r�| j � | j � n Wn t t f k r�t } n X| S( Ni i ( R% R RD R4 R6 R= R� t S_IMODEt fstatR� R; R< R� R R R� R� R� R R ( R� t srct destR� t srcfdt destfileR? R' ( ( s! /usr/share/authconfig/authinfo.pyt safeCopye sL ! c C s t } y& t j j | � s+ t j | � n Wn t t f k rK t } n X| d | j } | r{ | j | j | � } n | S( NR� ( R% R4 R� t isdirt mkdirR; R= R R R R ( R� t destdirR� t backuppath( ( s! /usr/share/authconfig/authinfo.pyt backup� s c C s� t } y t j j | � s t SWn t t f k r? t } n X| d | j } | r� t j j | � r� | j | | j � } n y5 | r� t d | j g d t j d t j � �n Wn t t f k r� n X| S( NR� s /usr/sbin/restoreconR� s /dev/null( R% R4 R� R R R= R; R t isfileR R R R5 R ( R� t backupdirR� R ( ( s! /usr/share/authconfig/authinfo.pyt restore� s ( R� R� R� R R R ( ( ( s! /usr/share/authconfig/authinfo.pyR ` s * c C s t j d � S( Nt nscd( R� R� ( ( ( s! /usr/share/authconfig/authinfo.pyt readCache� s c C sL | r t j d � n2 y t j t � t j d � Wn t k rG n Xt S( NR! ( R� R� R4 R� t PATH_NSCDR� R; R% ( R� ( ( s! /usr/share/authconfig/authinfo.pyt writeCache� s t CacheBackupc B s e Z d � Z d � Z RS( c C s t } y& t j j | � s+ t j | � n Wn t t f k rK t } n X| d | j } | r� d } y5 t � } t | d � } | j t t | � � � Wn t k r� t } n X| r� | j � q� n | s� y t j | � Wq� t k r� q� Xn | S( NR� t w( R% R4 R� R R R; R= R R R R" R5 R� t strt intR< t unlink( R� R R� R R R� ( ( s! /usr/share/authconfig/authinfo.pyR � s. c C s� t } y t j j | � s t SWn t t f k r? t } n X| d | j } | r� t j j | � r� d } y/ t | d � } t | j � � } t | � Wn t t t f k r� t } n X| r� | j � q� n | S( NR� t r( R% R4 R� R R R= R; R R R R5 R( R� R$ t ValueErrorR< ( R� R R� R R R� ( ( s! /usr/share/authconfig/authinfo.pyR � s$ ( R� R� R R ( ( ( s! /usr/share/authconfig/authinfo.pyR% � s i s hesiod.confs /hesiod.confs yp.confs /yp.confs ldap.confs /ldap.confs nss_ldap.confs /nss_ldap.confs pam_ldap.confs /pam_ldap.confs nslcd.confs /nslcd.confs openldap.confs /openldap/ldap.confs krb5.confs /krb5.confs krb.confs /krb.confs pam_pkcs11.confs /pam_pkcs11/pam_pkcs11.confs smb.confs /samba/smb.confs nsswitch.confs /nsswitch.confs cacheenabled.confRI s /pam.d/t authconfigs /sysconfig/authconfigt networks /sysconfig/networks libuser.confs /libuser.confs pwquality.confs /security/pwquality.confs login.defss /login.defss sssd.conft shadows /shadowt passwds /passwdt gshadows /gshadowt groups /groups 10-authconfigs /dconf/db/distro.d/10-authconfigs 10-authconfig-lockss, /dconf/db/distro.d/locks/10-authconfig-lockst ldapServert ldap_urit ldapBaseDNt ldap_search_baset enableLDAPSt ldap_id_use_start_tlst ldapSchemat ldap_schemat ldapCacertDirt ldap_tls_cacertdirt kerberosKDCt krb5_servert kerberosAdminServert krb5_kpasswdt kerberosRealmt krb5_realmt enableCacheCredst cache_credentialst krb5_store_password_if_offlineR� c B s� e Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z e d � Z d � Z d � Z! d � Z" d � Z# d! � Z$ d" � Z% d# � Z& d$ � Z' d% � Z( d& � Z) d' � Z* d( � Z+ d) � Z, d* � Z- d+ � Z. d, � Z/ d- � Z0 d. � Z1 d/ � Z2 d0 � Z3 d1 � Z4 d2 � Z5 d3 � Z6 d4 � Z7 d5 � Z8 d6 � Z9 d7 � Z: d8 � Z; d9 � Z< d: � Z= d; � Z> d< � Z? d= � Z@ d> � ZA d? � ZB d@ � ZC dA � ZD dB � ZE dC � ZF dD � ZG dE � ZH dF � ZI dG � ZJ dH � ZK dI � ZL dJ � ZM dK � ZN dL � ZO dM � ZP dN � ZQ dO � ZR dP � ZS RS(Q c 8 C s� | | _ d | _ g | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ t | _ t | _! d | _" d | _# d | _$ d | _% d | _& d | _' d | _( d | _) d | _* d | _+ d | _, d | _- d | _. d | _/ d | _0 d | _1 d | _2 d | _3 d | _4 d | _5 d | _6 d | _7 d | _8 d | _9 d | _: d | _; t< | _= d | _> d | _? d | _@ d | _A d | _B d | _C d | _D d | _E d | _F d | _G d | _H d | _I d | _J d | _K d | _L d | _M d | _N d | _O d | _P d | _Q d | _R d | _S d | _T t | _U t | _V d | _W d | _X d | _Y d | _Z d | _[ d | _\ d | _] d | _^ d | __ d | _` d | _a d | _b d | _c d | _d d | _e d | _f d | _g d | _h d | _i d | _j d | _k d | _l t< | _m d | _n d | _o d | _p t | _q tr r$y tr jr � | _n | jn js � Wq$tt k r q$Xn tu � | _v tw | jx | jy dm dn g � tw | jz d do dp g � tw | j{ | j| dq dr ds g � tw | j} d dt du dv dw dx dy g � tw | j~ d dz g � tw | j d d{ g � tw | j� d d| d} d~ d d� d� d� d� g � tw | j� d d� d� d� d� d� d� d� d� g � tw | j� | j� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� g � tw | j� d d� d� g � tw | j� d d� d� d� d� d� g � tw | j� | j� d� d� d� d� d� d� d� d� d� d� d� g � tw | j� d d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� g � tw | j� d d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� g' � tw | j� d d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d ddddddddd d g! � tw | j� d d g � tw | j� d d g � tw d | j| d g � tw d | j� dg � tw d | j� dddddg � tw d | j� ddddddg � tw d | j� ddg � g | _� d S( NRI t 9t 1t 0s deny=4 unlock_time=1200s umask=0077t enableCacheR' t implicitSSSDt hesiodLHSR� t hesiodRHSt nisDomainR� t nisLocalDomaint nisServerR2 R4 R6 R8 R: t passwordAlgorithmt passMinLent passMinClasst passMaxRepeatt passMaxClassRepeatt passReqLowert passReqUppert passReqDigitt passReqOtherR@ R< t smbSecurityt smbRealmt smbServersR> t kerberosRealmviaDNSt kerberosKDCviaDNSRB t enableSmartcardt forceSSSDUpdatet enableLDAPt enableKerberost enableLDAPAutht enableIPAv2t smartcardActiont smartcardModulet enableFprintdt forceSmartcardt smbWorkgroupt smbIdmapRanget winbindSeparatort winbindTemplateHomedirt winbindTemplateShellt winbindUseDefaultDomaint winbindOfflinet winbindKrb5t enableDBt enableDirectoriest enableWinbindt enableOdbcbindt enableNIS3t enableNISt enableLDAPbindt enableHesiodbindt enableHesiodt enableDBIbindt enableDBbindt enableCompatt enableWINSt enableMDNSt enableMyhostnamet enableSSSDt preferDNSinHostst pwqualityArgst passwdqcArgst faillockArgst enableFaillockt localuserArgst pamAccessArgst enablePAMAccesst mkhomedirArgst enableMkHomeDirt algoRoundst enableShadowt enableNullOkt forceBrokenShadowt enableWinbindAutht enableAFSt enableAFSKerberost enablePWQualityt enableEPSt enableEcryptfst enableOTPt enablePasswdQCt enableLocAuthorizet enableSysNetAutht enableSSSDAutht pamLinkedt implicitSSSDAutht systemdArgst uidMint enableForceLegacyt ipav2Servert ipav2Domaint ipav2Realmt ipaDomainJoinedt ipav2NoNTP( s enableCacheR' ( s implicitSSSDR' ( s hesiodLHSR� ( s hesiodRHSR� ( s nisDomainR� ( s nisLocalDomainR� ( s nisServerR� ( s ldapServerR� ( s ldapBaseDNR� ( s enableLDAPSR' ( s ldapSchemaR� ( s ldapCacertDirR� ( s passwordAlgorithmR� ( s passwordAlgorithmR� ( s passwordAlgorithmR� ( s passMinLenR� ( s passMinClassR� ( s passMaxRepeatR� ( s passMaxClassRepeatR� ( s passReqLowerR' ( s passReqUpperR' ( s passReqDigitR' ( s passReqOtherR' ( s kerberosRealmR� ( s kerberosKDCR� ( s smbSecurityR� ( s smbRealmR� ( s smbServersR� ( s kerberosAdminServerR� ( s kerberosRealmviaDNSR' ( s kerberosKDCviaDNSR' ( s ldapServerR� ( s ldapBaseDNR� ( s enableLDAPSR' ( s ldapSchemaR� ( s ldapCacertDirR� ( s enableCacheCredsR' ( s enableSmartcardR' ( s kerberosRealmR� ( s kerberosKDCR� ( s kerberosAdminServerR� ( s forceSSSDUpdateR' ( s enableLDAPR' ( s enableKerberosR' ( s enableLDAPAuthR' ( s enableIPAv2R' ( s smartcardActionR� ( s smartcardModuleR� ( s smartcardActionR� ( s smartcardModuleR� ( s enableFprintdR' ( s enableSmartcardR' ( s forceSmartcardR' ( s smbWorkgroupR� ( s smbServersR� ( s smbRealmR� ( s smbSecurityR� ( s smbIdmapRangeR� ( s winbindSeparatorR� ( s winbindTemplateHomedirR� ( s winbindTemplateShellR� ( s winbindUseDefaultDomainR' ( s winbindOfflineR' ( s winbindKrb5R' ( s enableDBR' ( s enableDirectoriesR' ( s enableWinbindR' ( s enableOdbcbindR' ( s enableNIS3R' ( s enableNISR' ( s enableLDAPbindR' ( s enableLDAPR' ( s enableHesiodbindR' ( s enableHesiodR' ( s enableDBIbindR' ( s enableDBbindR' ( s enableCompatR' ( s enableWINSR' ( s enableMDNSR' ( s enableMyhostnameR' ( s enableNIS3R' ( s enableNISR' ( s enableIPAv2R' ( s enableSSSDR' ( s preferDNSinHostsR' ( s implicitSSSDR' ( s pwqualityArgsR� ( s passwdqcArgsR� ( s faillockArgsR� ( s enableFaillockR' ( s localuserArgsR� ( s pamAccessArgsR� ( s enablePAMAccessR' ( s mkhomedirArgsR� ( s enableMkHomeDirR' ( s algoRoundsR� ( s passwordAlgorithmR� ( s enableShadowR' ( s enableNISR' ( s enableNullOkR' ( s forceBrokenShadowR' ( s enableLDAPAuthR' ( s enableKerberosR' ( s enableSmartcardR' ( s forceSmartcardR' ( s enableWinbindAuthR' ( s enableMkHomeDirR' ( s enableAFSR' ( s enableAFSKerberosR' ( s enablePWQualityR' ( s enableEPSR' ( s enableEcryptfsR' ( s enableOTPR' ( s enablePasswdQCR' ( s enableLocAuthorizeR' ( s enableSysNetAuthR' ( s winbindOfflineR' ( s winbindKrb5R' ( s enableSSSDAuthR' ( s enableFprintdR' ( s pamLinkedR' ( s implicitSSSDAuthR' ( s systemdArgsR� ( s uidMinR� ( s enableIPAv2R' ( s passwordAlgorithmR� ( s enableShadowR' ( s enableNISR' ( s enableLDAPR' ( s enableLDAPAuthR' ( s enableKerberosR' ( s enableEcryptfsR' ( s enableSmartcardR' ( s forceSmartcardR' ( s enableWinbindAuthR' ( s enableWinbindR' ( s winbindKrb5R' ( s enableDBR' ( s enableHesiodR' ( s enablePWQualityR' ( s enablePasswdQCR' ( s enableFaillockR' ( s faillockArgsR� ( s enableLocAuthorizeR' ( s enablePAMAccessR' ( s enableCacheCredsR' ( s enableMkHomeDirR' ( s enableSysNetAuthR' ( s enableFprintdR' ( s enableSSSDR' ( s enableSSSDAuthR' ( s enableForceLegacyR' ( s ipav2ServerR� ( s ipav2DomainR� ( s ipav2RealmR� ( s enableIPAv2R' ( s ipaDomainJoinedR' ( s ipav2NoNTPR' ( s nisDomainR� ( s enableShadowR' ( s enableNISR' ( s enableMkHomeDirR' ( s enableLDAPR' ( s enableLDAPAuthR' ( s implicitSSSDR' ( s implicitSSSDAuthR' ( s enableForceLegacyR' ( s implicitSSSDR' ( s implicitSSSDAuthR' ( s enableIPAv2R' ( s enableSSSDR' ( s enableSSSDAuthR' ( s enableForceLegacyR' ( s enableWinbindR' ( s enableWinbindAuthR' (� t messageCBt backupDirR� RJ RK R2 R4 R R@ R[ R< R\ R> RN RL RM Rg RY RZ RX Rh Ri Rj Rk Rl Rm Rn R� R� R� R� R R� t ipaUninstallRd Rc RH Rz Ro Rp Rw R_ R6 Rt Rs Ry Rx Rv Ru Rr Rq R{ R| R} R R~ Rb t enableAltfilesR� R� R% R� R� R� R� R` Ra RO R� R� R� R� R� R� R� R� R� R� R] R� t brokenShadowR� Rf Re R� RI R� RB RP RQ RR RS RT RU RV RW R� R� t joinUsert joinPasswordR� R� R� R� R� R� R: t ldapCacertURLR8 R� t sssdConfigt sssdDomainR^ t sssdConfigPresentt SSSDConfigt new_configR= t sett toggleFunctionsR� R$ t toggleCachingServicet writeHesiodt writeNISt toggleNisServicet writeLDAPt writeLibusert writeLogindefst writePWQualityt writeKerberost writeSSSDt toggleSSSDServicet writeSmartcardt writeDConft writeWinbindt toggleWinbindServicet writeNSSt writePAMt writeSysconfigt writeNetworkt toggleShadowt toggleOddjobServicet toggleLDAPServicet save_groups( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� & sr c C sZ t | | � } | | k rV t | | | � | t | | � k rV | j j | � qV n d S( N( R� t setattrR� t append( R� t attrR# t reft oldval( ( s! /usr/share/authconfig/authinfo.pyt setParam� s c C s> y t | � } Wn t k r$ d SX| j | t | � | � S( N( R( R+ R� R' ( R� R� R# R� ( ( s! /usr/share/authconfig/authinfo.pyt setIntParam s c C sW y t | � } Wn t k r$ d SX| d k rD | j | t | � S| j | t | � S( Ni ( R( R+ R� R% R ( R� R� R# R� ( ( s! /usr/share/authconfig/authinfo.pyt setClassReqParam s c C s� | j s | j r t Sd } d } d } d } d } x> | D]6 } t | d | � r< | | k re t S| d 7} q< q< W| d k r� t Sd } x> | D]6 } t | d | � r� | | k r� t S| d 7} q� q� W| d k r� t S| j r� | j r� t St S( Nt NISt LDAPt Winbindt Hesiodt IPAv2t Kerberost LDAPAutht WinbindAutht Smartcardi R� i ( R� R� R� R� R� ( R� R� R� R� ( R� R� ( R� R� R R� R` R[ R% ( R� t nssallt pamallt idsupportedt authsupportedt numt t( ( s! /usr/share/authconfig/authinfo.pyt sssdSupported s2 c C s� y t j t t j � } Wn t k r. t SX| j d t | j d � � | � | j d t | j d � � | � | j � t S( NRJ t lhsRK t rhs( t shvfileR� t all_configst CFG_HESIODR R= R R� R t getValueR< R% ( R� R� t shv( ( s! /usr/share/authconfig/authinfo.pyt readHesiod2 s "" c C sJ y t t t j d � } Wn t k r. t SXd } x� | D]� } | j � } t | d � } | r� | j r� t | | � } q< n t | d � } | r< | j d d � } t | � d k r� q< n | d | j k r� q< n t | � d k r� q< n | d } t | d � } | r%t | | � } q%q< q< W| j d | | � | j � t S( NR* RI t ypserverR� i i i t serverRN ( R5 R� t CFG_YPR R= R t stripR RM R$ R R R R� R< R% ( R� R� t ft nisserverR R# ( ( s! /usr/share/authconfig/authinfo.pyt readNISC s6 c C ss d | k r | j d � } n | j � } xB | D]: } y t j | � j } Wq1 t t j f k rj t SXq1 Wt S( s& Check whether LDAP URI is valid. R ( R t urlparset portR+ t socketR� R R% ( R� R t urist urit p( ( s! /usr/share/authconfig/authinfo.pyt validateLDAPURIm s c C s� d | k r | j d � } n | j � } d } xU | D]M } | r7 | rV | d 7} n d | k ro | | 7} q� | d | d 7} q7 q7 W| r� | j | � r� | j t d � � n | S( NR RI s ://s ldap://R� s Invalid LDAP URI.( R R� R� R� ( R� R t validatet lt rett item( ( s! /usr/share/authconfig/authinfo.pyt ldapHostsToURIs| s c C s t | _ y t t t j d � } Wn� t k r� y t t t j d � } Wq� t k r� y t t t j d � } Wq� t k r� y t t t j d � } Wq� t k r� t SXq� Xq� Xn Xx| D] } | j � } t | d � } | rt | � r| j d | | � q� n t | d � } | rC| j d | | � q� n t | d � } | rq| j d | | � q� n t | d � } | r�| j d t | d � | � q� n t | d � } | r� | j d | | � q� q� q� W| j t | j � t � | _ | j � t S( NR* R R4 t hostR2 R� t sslR6 t start_tlst nss_schemaR8 ( t PATH_LDAP_CACERTSR: R5 R� t CFG_NSSLDAPR R= t CFG_NSLCDt CFG_PAMLDAPt CFG_LDAPR R� R R* R� R R� R R2 R< R% ( R� R� R� R R# ( ( s! /usr/share/authconfig/authinfo.pyt readLDAP� sN c C s( y | j | SWn t k r# d SXd S( NRI ( t allKerberosKDCst KeyError( R� RQ ( ( s! /usr/share/authconfig/authinfo.pyt getKerberosKDC� s c C s( y | j | SWn t k r# d SXd S( NRI ( t allKerberosAdminServersR ( R� RQ ( ( s! /usr/share/authconfig/authinfo.pyt getKerberosAdminServer� s c C s� d } i | _ i | _ t } y t t t j d � } Wn t k rL t SXx | D]} | j d � d } | j � } | d d !d k r� | d d !} d } qT n | d k rbt | d � } | r� | j d | | � t } qT n t | d � } | r"| j d t | d � d k | � qT n t | d � } | rY| j d t | d � d k | � qT qYqT | d k rT | s�| j d d � } t | � d k r�qT n | d } qY| d d !d k r�d } qT n | j s�| | _ t } n t | d � } | r t | j | � | � | j | <qT n t | d � } | rYt | j | � | � | j | <qYqT qT W| j � | r�| j r�| j d | j | j � | � | j d | j | j � | � q�n/ | j r�| j j d � n | j d d | � t S( NRI R* t #i i t [i����t libdefaultst default_realmR@ t dns_lookup_kdcR\ t truet dns_lookup_realmR[ t realmst }RL t admin_serverR< R> ( R R R R5 R� t CFG_KRB5R R= R R� R R� R% R R R R@ R$ R R R< R� R� ( R� R� t sectiont realm_foundR� R t subsectionR# ( ( s! /usr/share/authconfig/authinfo.pyt readKerberos� sr "" ) % c C s� d } y t t t j d � } Wn t k r4 t SXx� | D]� } | j � } | d d !d k rz | d d !} d } q< n | d k r< t | d � } | r� | j d | j � | � q< q� q< q< W| j � t S( NRI R* i i R i����t defaultst crypt_styleRO ( R5 R� t CFG_LIBUSERR R= R R� R R� R! R< R% ( R� R� R R� R R R# ( ( s! /usr/share/authconfig/authinfo.pyt readLibuser s$ c C sh y t t t j d � } Wn t k r. t SXx(| D] } t j | � } | d k r6 | j d � } | j d � r{ q6 n | j d � } | d k r� | j d � } n | d k r� d } q� n q6 | d k r� | d k r� | j d d | � q6 n | d k r4| d k rd } n | j d | j � | � q6 n | d k r6 | j d | | � q6 q6 W| j � t S( NR* i R i i RI t MD5_CRYPT_ENABt yesRO Rk t ENCRYPT_METHODt DESRi t UID_MINR� ( R5 R� t CFG_LOGIN_DEFSR R= R t ld_line_ret matchR R1 R R� R! R< R% ( R� R� R� R R$ R� R# ( ( s! /usr/share/authconfig/authinfo.pyt readLogindefs: s8 c C s� d } y t t t j d � } Wn t k r4 t SXx�| D]�} | j d � d } | j � } t | d � } | r� | j d | | � q< n t | d � } | r� | j d | | � q< n t | d � } | r� | j d | | � q< n t | d � } | r| j d | | � q< n t | d � } | rG| j d | | � q< n t | d � } | ru| j d | | � q< n t | d � } | r�| j d | | � q< n t | d � } | r< | j d | | � q< q< q< W| j � t S( NRI R* R i t minlenRP t minclassRQ t maxrepeatRR t maxclassrepeatRS t lcreditRT t ucreditRU t dcreditRV t ocreditRW ( R5 R� t CFG_PWQUALITYR R= R R R� R R� R� R< R% ( R� R� R R� R R# ( ( s! /usr/share/authconfig/authinfo.pyt readPWQuality\ sT c C s% | j s t St j � | _ y$ | j j t t j � t | _ Wn6 t t j f k rx t j � | _ | j j � n Xy | j j t � } | _ Wn� t j k ruy | j j � d } Wn= t k r� y | j j � d } Wq t k r� t SXn X| j j | � } y | j d � } Wn t j k rAd } n Xy | j d � } Wqvt j k rqd } qvXn Xx� t D]� \ } } y} | j | � } | d k r�d j | j d � � } n0 | d k r�| d k r�w}n | d k r�w}n | j | | | � Wq}t j k r q}Xq}Wd S( Ni t id_providert auth_providerR3 R R R9 t rfc2307RD ( R� R% R� t import_configR� t CFG_SSSDR R� R= t ParsingErrorR� t get_domaint SSSD_AUTHCONFIG_DOMAINR� t NoDomainErrort list_active_domainst IndexErrort list_domainst get_optiont NoOptionErrorR t sssd_optionsR R R� ( R� R� R� t domnamet idprovt authprovR� t optR� ( ( s! /usr/share/authconfig/authinfo.pyt readSSSD� sP c C s� t } t d g � } | d k r. d | _ t S| j d | d | � t d g � } | d k rd t Sx# | D] } d | k rk t } qk qk W| r� | j d t d � | � n | j d t d � | � t S( Nt use_moduleRI Rd i t rm_actions lockhelper.shRc R� R� ( R R� R Rd R� R% R� ( R� R� t lockt smartcardmodulet rmactionst action( ( s! /usr/share/authconfig/authinfo.pyt readSmartcard� s c C s� d } d } y t t t j d � } Wn t k r: | SXx� | D]� } | j � } t | d � ri qB n t | d � r~ qB n t | d � } | r� | j d � d j � } qB n | sB | d k r� qB n t | | � } | rB | } qB qB W| j � | S( NRI R* R t ;R t ]i t global( R5 R� t CFG_SMBR R= R� R R R R! RV R< ( R� R t resultR R� R R# t res( ( s! /usr/share/authconfig/authinfo.pyt readWinbindGlobal� s. c C sT | j | � } | rP | j � d k sE | j � d k sE | d k rI t St Sn d S( NR R RF ( RQ R! R% R R ( R� R t tmp( ( s! /usr/share/authconfig/authinfo.pyt readWinbindGlobalBool� s 0c C s� | j d � } | r+ | j d | | � n | j d � } | rV | j d | | � n | j d � } | r� | j d | | � n | j d � } | r� | j d | | � n | j s� d | _ n | j d � } | r� | j d | | � n | j sd | _ n | j d � } | r,| j d | | � n | j d � } | rW| j d | | � n | j d � } | r�| j d | | � n | j s�d | _ n | j d � } | d k r�| j d | | � n | j d � } | d k r�| j d | | � n t S( Nt workgroupRg s password serverRZ RQ RY t securityRX t users idmap config * : rangeRh s 16777216-33554431s winbind separatorRi s template homedirRj s template shellRk s /bin/falses winbind use default domainRl s winbind offline logonRm ( RQ R� RX Rh Rk RS R R% ( R� R� RR ( ( s! /usr/share/authconfig/authinfo.pyt readWinbind� sJ c C s] d } d } y t t t j d � } Wn t k r: t SXxM| D]E} | j � } t | d � } | rr | } qB t | d � } | rit | d � r� | j d t | � n t | d � r� | j d t | � n t | d � r� | j d t | � n t | d � } | d k r#t | d � } n t | d � } | d k r�| d k r�| j d | | k | � q�qB t | d � } | rB | } qB qB W| rOd# d$ d% d& d' d( d) d* d+ f } x= | D]5 \ } } t | | � r�| j d | t | � q�q�W| r*t | d! � r*t | d! � r*| j j d" � n | j d" t t | d! � � | � n | j � t S(, NRI R* s passwd:s hosts:t winsR{ s mdns4_minimal [NOTFOUND=return]R| t myhostnameR} t nist dnsR s initgroups:t Compatt compatt DBt dbt Directoriest directoriesR� t hesiodR� R� R� t Altfilest altfilest NIS3t nisplusR� R� R� R} RI ( R\ R] ( R^ R_ ( R` Ra ( s Hesiods hesiod( s LDAPR� ( s NISRZ ( Rc Rd ( Re Rf ( s WinbindR� ( R5 R� t CFG_NSSWITCHR R= R R� R R3 R� R% R R� R� t boolR< ( R� R� t nssconfigt initgroupsR� R R# t nispost dnspost nssmapR� t nssentry( ( s! /usr/share/authconfig/authinfo.pyt readNSS sR %% c C s | j d t � | � t S( NRH ( R� R" R% ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR" W s c C s� y t t t j d � } WnA t k r] y t t d t d � } Wq^ t k rY t SXn X| j | | � | j � y t t t j d � } WnA t k r� y t t d t d � } Wq� t k r� t SXn X| j | | � | j � t S( NR* s /pam.d/( R5 R� t CFG_PAMR R= t SYSCONFDIRt AUTH_PAM_SERVICER t readPAMFileR< t CFG_POSTLOGIN_PAMt POSTLOGIN_PAM_SERVICER% ( R� R� R� ( ( s! /usr/share/authconfig/authinfo.pyt readPAM\ s& c C s" d } x|| D]t} | j d d � } t | � d k rD | d } n | j � } | d d k rx | | d d 7} q n | | } d } | j � } d } | j d d � } t | � d k r� q n | \ } } | d k r| d k r| d k r| d k rq n | j d � r*| j d d � } n | j d d � } t | � d k rTq n | d d k rjq n | d } | j d � r�| d 7} n | d } | j d d � } t | � d k r�q n | d j d � d \ } t | � d k r�| d } n | j d � s| j d � rP| j d t | � | r | j d | | � q q n | j d � rx| j d t | � q n | j d � r�| j d t | � q n | j d � r�| j d t | � q n | j d � r%| j d t | � d | k r | j d t | � q | j d t | � q n | j d � rM| j d t | � q n | j d! � r�| j d" t | � | r | j d# | | � q q n | j d$ � r�| j d% t | � | j d& | j d' � d k | � q n | j d( � r| j d) t | � q n | j d* � rG| j d+ t | � | r | j d, | | � q q n | j d- � se| j d. � r�| j d/ t | � | r | | _ q q n | j d0 � r�| j d1 t | � | r | j d2 | | � q q n | j d3 � r| r | j d4 | | � q q n | d k r| j d5 � rx9 t D]1 } | j | � d k r'| j d6 | | � q'q'WyP | j d7 � } | | d8 j d d � } | j d9 t t | d � � | � Wn t t f k r�n Xy$ t j d: � | j d; t | � Wqt k r| j d; t | � qXqn | d k r�| j d5 � rW| j d< | j d= � d k | � n | j d> � r�| j d? t | � | r d@ | k r | j d@ d � j � } | j dA | | � q q q�n | d k r| j d5 � r| j dB | j dC � d k | � qn | d k s | d k r | j dD � r�t j | � } | d k r~| j d � d k r~| j dE | j d � | � q~q�q q W| j r�| j r�| j d" t | � n | j r�| j r�| j d t | � n | j r | j r | j r | j r | j r | j r t | _! n d S(F NRI R i i i����s \R i Rn Ro Rq Rp R RL t includeR� t pam_cracklibt pam_pwqualityR� R� t pam_ecryptfsR� t pam_krb5R` t pam_ldapRa t pam_pkcs11R] t authinfo_unavailRf t pam_fprintdRe t pam_passwdqcR� R� t pam_winbindR� Rn t krb5_autht pam_sssR� t pam_accessR� R� t pam_mkhomedirt pam_oddjob_mkhomedirR� t pam_localuserR� R� t pam_systemdR� t pam_unixRO s rounds=i R� s /etc/shadowR� R� t nullokt pam_faillockR� R� R� R� t broken_shadowt pam_succeed_ifR� (" R R R R R R R� R% R R- R� t password_algorithmsR� R' R( R+ R: R4 R� R; R R� t succ_if_reR$ R1 R� R� R� Ra R` R� R� R] R� ( R� R� R� t prevlineR R t argst stackt controlt modulet algot ridxt roundsR$ ( ( s! /usr/share/authconfig/authinfo.pyRs w s " ' % (!)c C sS y;t j t t j � } y | j d � | _ Wn t k rB n Xy | j d � | _ Wn t k rl n Xy | j d � | _ Wn t k r� n Xy | j d � | _ Wn t k r� n Xy | j d � | _ Wn t k r� n Xy | j d � | _ Wn t k rn Xy | j d � | _ Wn t k r>n Xy( | j d � | _ | j d � | _ Wn t k rzn Xy | j d � | _ Wn t k r�n Xy | j d � | _ Wn t k r�n Xy | j d � | _ Wn t k r�n Xy | j d � | _ Wn t k r"n Xy | j d � | _ Wn t k rLn Xy | j d � | _ Wn t k rvn Xy | j d � | _ Wn t k r�n Xy | j d � | _ Wn t k r�n Xy | j d � | _ Wn t k r�n Xy | j d � | _ Wn t k r n Xy | j d � | _ Wn t k rHn Xy. | j d � } | rmd | _ n d | _ Wn t k r�n Xy | j d � | _ Wn t k r�n Xy | j d � | _ Wn t k r�n Xy | j d � | _ Wn t k rn Xy | j d � | _ Wn t k r2n Xy | j d � | _! Wn t k r\n Xy | j d � | _" Wn t k r�n Xy | j d � | _# Wn t k r�n Xy | j d � | _$ Wn t k r�n Xy | j d � | _% Wn t k rn Xy | j d! � | _& Wn t k r.n Xy | j d" � | _' Wn t k rXn Xy | j d# � | _( Wn t k r�n Xy | j d$ � | _) Wn t k r�n Xy | j d% � | _* Wn t k r�n Xy | j d& � | _+ Wn t k r n Xy | j d' � | _, Wn t k r*n Xy | j d( � | _- Wn t k rTn Xy | j d) � | _. Wn t k r~n Xy | j d* � | _/ Wn t k r�n Xy | j d+ � | _0 Wn t k r�n X| j d, � | _1 | j d- � | _2 | j d. � | _3 | j d/ � } | t4 k r0| | _ n | j5 � Wn t6 k rNn Xt7 S(0 Nt USEAFSt USEAFSKERBEROSt USEDBt USEPWQUALITYt USEDBBINDt USEDBIBINDt USEDIRECTORIESt USEFAILLOCKt FAILLOCKARGSt USEECRYPTFSt USEEPSt USEHESIODt USEHESIODBINDt USEKERBEROSt USELDAPt USELDAPAUTHt USESMARTCARDt USEFPRINTDt FORCESMARTCARDt USELDAPBINDt USEMD5Rk Ri t USENISt USENISPLUSt USEODBCBINDt USEOTPt USEPASSWDQCt USESHADOWt USEWINBINDt USEWINBINDAUTHt WINBINDKRB5t USESSSDt USESSSDAUTHt USELOCAUTHORIZEt USEPAMACCESSt USEMKHOMEDIRt USESYSNETAUTHt FORCELEGACYt CACHECREDENTIALSt USEIPAV2t IPADOMAINJOINEDt IPAV2NONTPt IPAV2SERVERt IPAV2DOMAINt IPAV2REALMt PASSWDALGORITHM(8 R� R� R� t CFG_AUTHCONFIGR t getBoolValueR� R+ R� Ro R� Ry Rx Rp R� R� R� R� R� Rw Rv R` R_ Ra R] Re Rf Ru RO Rt t enableNISP3Rr R� R� R� Rq R� Rn R~ R� R� R� R� R� R� RB Rb R� R� R� R� R� R� R< R= R% ( R� R� t enableMD5R� ( ( s! /usr/share/authconfig/authinfo.pyt readSysconfig s` c C s� y t j t t j � } Wn t k r. t SX| j d � } | rP | | _ n | j � | j r| | j d | j | � n t S( Nt NISDOMAINRL ( R� R� R� t CFG_NETWORKR R= R R� RM R< R� R% ( R� R� R� RR ( ( s! /usr/share/authconfig/authinfo.pyt readNetwork� s c C sh | j � } t | j � | k s6 t | j � | k r: t Sx' | j D] } | j | | � rD t SqD Wt S( N( R� Rh RI R� R% R� R� R ( R� R' t sssdsupportedR1 ( ( s! /usr/share/authconfig/authinfo.pyt differs� s *c C s� t | j � | _ t | j � | _ t | j � | _ t | j � | _ | j | j | � | _ | j d k r� | j r� | j j � | _ q� n | j j � | _ | j d k r� t | _ n | j d k r� d | _ n d S( Nt adsRI ( R RZ R� R< R> R� R2 RX RY t upperRO R! RB R R% R@ ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyt update� s c C s� | j � } | j � | j | � | j | � | j | � | j � } | j r� | r� | j r� | j d t | � t | _ n | j r� | r� | j r� | j d t | � t | _ n | j | � | j | � | j | � | j | � | j | � | j | � | j r-| j r-| j | � n | j | � | j | � | j sY| j ri| j | � n | j | � | j | � | j � d S( NR~ R� ( t copyR� Ro R Rv R� RI Rb R� R% R R� R% R/ R� RW R� R� RC R R RJ R" R� ( R� R� t reallyimplicit( ( s! /usr/share/authconfig/authinfo.pyR� s6 c C s% t j | � } d | _ d | _ | S( NRI ( R� R� R� ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� & s c C s/ t t j | j � t | j o' | j � t S( N( R� t CFG_CACHER R� R$ RH RI R% ( R� ( ( s! /usr/share/authconfig/authinfo.pyR$ , s c C s� t t j | j � y t j t t j � } Wn t k rB t SX| j d | j � | j d | j � | j d � | j � t S( NR� R� i� ( R� R� R R� R� t rcreateR R= R t setValueRJ RK R� R< R% ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� 1 s c C s� t } d } d } t t j | j � z�t t t j d � } x�| j D]�} | j � } t | d � } | r}| j d d � } t | � d k r� qI n | d | j k r� | d | j k r� | | 7} qI n | r�| j r�| d | j 7} | j j d � } | j r'| d 7} | | d 7} n | d 7} | d 7} | d } x) | D]! } | rL| d | d 7} qLqLWt } q�qI t | d � r�| r�| j r�| j r�| j j d � } x) | D]! } | r�| d | d 7} q�q�Wt } q�qI | | 7} qI W| s�| j j d � } | j rv| d | j 7} | d r_| d 7} | | d 7} | d } n | d 7} | d 7} n x, | D]! } | r}| d | d 7} q}q}Wn | j � | j | � | j � Wd y | r�| j � n Wn t k r�n XXt S( NRI i� R� i i s domain R s server s broadcasts s ypserver R� ( R R R� R� R R� R� R R� R� R R R RL RM RN R% R R R� R R< R= ( R� t writtenR� RK R t lsR# t serversR ( ( s! /usr/share/authconfig/authinfo.pyR� @ sv & c C s� t } t } t } t } t } t } d } d } | j r` | j d k r` | j d k r` d } n d } z�t | d � } xJ| j D]?} | j � } t | | � r� | r�| j r�| | d 7} | d j | j j d � � 7} | d 7} t } q�q� t | | � r"| j r�| d | 7} q�q� t | | � rr| r�| j r�| | d 7} | | j 7} | d 7} t } q�q� | r�t | d � r�| s�| d 7} | j r�| d 7} n | d 7} | d 7} t } q�q� | r t | d � r | r�| j r�| d 7} | | j 7} | d 7} t } q�q� t | d � rx| s�| rG| d 7} n | d 7} | d | j 7} | d 7} t } q�q� | r�t | d � r�| s�| d | 7} | d 7} t } q�q� | | 7} q� W| r| j r| | d 7} | d j | j j d � � 7} | d 7} n | rG| j rG| | d 7} | | j 7} | d 7} n | r�| r�| d 7} | j rt| d 7} n | d 7} | d 7} n | r�| r�| j r�| d 7} | | j 7} | d 7} n | s| r�| d 7} n | d 7} | d | j 7} | d 7} n | r.| r.| d | 7} | d 7} n | j � | j | � | j � Wd y | ri| j � n Wn t k r}n XXt S( NRI Ri Rj Rk t crypti� R R s R R� s ssl R� t noR� s nss_schema t tls_cacertdirt TLS_CACERTDIRt pam_passwords pam_password ( R R RO R� R� R� R R2 R R R% R+ R4 R6 R8 R" R: R R� R R< R= ( R� R> R� R� R t writepadlt writeschemat writepamt wrotebasednt wroteservert wrotesslt wroteschemat wrotepasst wrotecacertdirR� RK t passalgoR R� ( ( s! /usr/share/authconfig/authinfo.pyt writeLDAP2� s� c C s� t j j t t j � rV t t j | j � | j t t j d d d t t t � n t j j t t j � r� t t j | j � | j t t j d d d t t t � n t j j t t j � rt t j | j � | j t t j d d d t t t � n t j j t t j � rXt t j | j � | j t t j d d d t t t � n t t j | j � | j t t j d d d t t t � } | S( NR� R� R t URIt HOSTt BASE( R4 R� R R� R R R R� R� R% R R R R t CFG_OPENLDAP( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� s( c C sR d } | j d k r | d S| j d k s; | j d k rF | | j S| d Sd S( Ns crypt_style = Rk Rl Rm t des( RO ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyt cryptStyle s c C s� t } t } d } d } d } t t j | j � zDt t t j d � } x� | j D]� } | j � } | d k r� t | d � r� | | j � d 7} t } qU n t | d � r| d k r� | r� | | j � d 7} t } n | d j d d � d } | d k rt } qn | | 7} qU W| sT| d 7} | | j � d 7} t } t } n | j � | j | � | j � Wd y | r�| j � n Wn t k r�n XXt S( NRI i� R R s R i RL i s [defaults] ( R R R� R R R� R� R R� R� R R� R% R R R� R R< R= ( R� t wrotecryptstylet wrotedefaultsR R� RK R R� ( ( s! /usr/share/authconfig/authinfo.pyR� * sH c C s t } t } d } d } d } t t j | j � | j d k rJ d } n d } | j d k sn | j d k rw d } n d | j j � d } z^t t t j d � } x� | j D]� } t j | � } | d k rE| j d � } | j d � r | | 7} q� n | j d � } | d k r-| j d � } n | d k rRd } qRn | | 7} q� | d k rt| | 7} t } q� n | d k r�| | 7} t } q� n | | 7} q� W| s�| | 7} n | s�| | 7} n | j � | j | � | j � Wd y | r| j � n Wn t k rn XXt S( NRI Rk s MD5_CRYPT_ENAB yes s MD5_CRYPT_ENAB no Ri Rj s ENCRYPT_METHOD DES s ENCRYPT_METHOD s i� i R i i R R ( R R R� R" R R� RO R� R� R R� R# R$ R1 R R% R R� R R< R= ( R� t wrotemd5cryptt wroteencmethodR R� RK t md5cryptt encmethodR R$ R� R# ( ( s! /usr/share/authconfig/authinfo.pyR� _ sd c C s� | j d � } t | � d k r3 | j d � } n t | � d k r� ya t | d � } | d k rh | S| r� | d k r� | d d S| r� | d k r� | d d SWq� t k r� q� Xn | r� d } n d } | d d | S( NR i R i s = -1s = 0s -1RG s = ( R R R( R R+ ( R� R R# R� R� ( ( s! /usr/share/authconfig/authinfo.pyt formatClassReqParam� s$ c C s� t } t } t } t } t } t } t } t } d } d } t t j | j � zjt t t j d � } x | j D]} | j d � d j � } t | d � r� | ss | d | j d 7} t } qs qs n t | d � r| ss | d | j d 7} t } qs qs n t | d � r=| ss | d | j d 7} t } qs qs n t | d � rv| ss | d | j d 7} t } qs qs n t | d � r�| ss | | j | | j � d 7} t } qs qs n t | d � r�| ss | | j | | j � d 7} t } qs qs n t | d � r9| ss | | j | | j � d 7} t } qs qs n t | d � rz| ss | | j | | j � d 7} t } qs qs n | | 7} qs W| s�| d | j d 7} n | s�| d | j d 7} n | s�| d | j d 7} n | s | d | j d 7} n | s&| | j d | j � d 7} n | sL| | j d | j � d 7} n | sr| | j d | j � d 7} n | s�| | j d | j � d 7} n | j � | j | � | j � Wd y | r�| j � n Wn t k r�n XXt S( NRI i� R i R& s minlen = s R' s minclass = R( s maxrepeat = R) s maxclassrepeat = R* R+ R, R- ( R R R� R. R R� R� R R� R R� R RP R% RQ RR RS R� RT RU RV RW R R� R R< R= ( R� t wroteminlent wroteminclasst wrotemaxrepeatt wrotemaxclassrepeatt wrotereqlowert wroterequppert wrotereqdigitt wrotereqotherR� RK R R� ( ( s! /usr/share/authconfig/authinfo.pyR� � s� c ' C s� t } t } t } t } t } t } t } t } t } t } t } t } t } t } t } t j t t j � } d } d } d } d } t t j | j � | j r� | j r� | j } n? | j s� | j r� | j d k r� | j r� | j } n | j } | j | j k rt } n ze t t t j d � } x,| j D]!} | j � } t | d t � rq| s7t } qqq7n | d k r�| r�| | j k r�t | d � r�| s7| j r�| t | j � 7} n t } q7q7n | d k rH| j d k rH| rH| | j k rHt | d � rH| s7| j r9| t | j � 7} n t } q7q7n | d k r�| r�| | j k r�t | d � r�| s7| j r�| t | j � 7} n t } q7q7n | d k rB| rB| j d d � } t | � d k r�| | 7} q7n | d } | j r | | j k r t } n | j rB| | j k rBt } qBn | d k r| rt | d � r| j r�| | j k r�| s�| t | j � 7} t } n | s�| t | j � 7} t } q�n | j r�| | j k r�| s�| t | j � 7} t } q�n d } n | d k r]t | d � r]| r7| r7| d 7} | | 7} | d 7} t } q7q7n | d k r�t | d � r�| s7| d 7} | t t | j � � j � 7} | d 7} t } q7q7n | d k r#t | d � r#| s7| d 7} | t t | j! � � j � 7} | d 7} t } q7q7n | d k r�| j r�t | | j j � � slt | d | j j � � r�| | 7} t } q7n t | d � rN| s�| d t d 7} t } n | d k r�| j r�| r�| t" | j | j | j � 7} t } n | d k r7| j r7| r7| t" | j | j d � 7} t } n | d k r | rw| rw| d 7} | | 7} | d 7} t } n | j d k r�| r�| d 7} | t t | j � � j � 7} | d 7} t } n | j! d k r | r | d 7} | t t | j! � � j � 7} | d 7} t } q n | d k r�| j r�| r�| d | j j � 7} | d | j 7} | d 7} | d | j j � 7} | d | j 7} | d 7} t } q�n | r�| d k r�t } q�| d k r�t } q�| d k r�t } q�n | d j d d � d } | d k r!t } qN| d k r6t } qN| d k rNt } qNn | | 7} q7W| s> | su| d 7} n | r�| r�| d 7} | | 7} | d 7} n | j d k r�| r�| d 7} | t t | j � � j � 7} | d 7} n | j! d k r> | r> | d 7} | t t | j! � � j � 7} | d 7} q> n | r� | j sW | j r� | sj | d 7} n | s� | t" | j | j | j � 7} n | s� | t" | j | j d � 7} q� n | rW | j rW | s� | d 7} n | j rW | rW | d | j j � 7} | d | j 7} | d 7} | d | j j � 7} | d | j 7} | d 7} qW n | j# � | j$ | � | j% � Wd y | r� | j& � n Wn t' k r� n XXt S( NRI R� i� s includedir R RL R i i R R R s default_realm = s R s dns_lookup_realm = R s dns_lookup_kdc = t domain_realmR� R R s = s .RL s [libdefaults] s [realms] s [domain_realm] (( R R4 R� t PATH_KRB5_INCLUDEDIRt R_OKR R� R R R� R` R@ Rq R� RX RY R% R� R R� R� R R< RM RZ R> RP R R R' Rh R[ R! R\ RR R R� R R< R= ( R� t wroterealmt wrotekdct wroteadmint wrotesmbrealmt wrotesmbkdct wroterealmst wrotelibdefaultst wroterealms2t wrotelibdefaults2t wrotedefaultrealmt wrotednsrealmt wrotednskdct wroteourdomrealmt wrotedomrealmt wrotedomrealm2t wroteincdirR R R� RK t defaultrealmR R� R# ( ( s! /usr/share/authconfig/authinfo.pyR� s� ! ! ! ! ! - " c C ss y | j | d � } Wn t j k r3 d } n X| | k ro | d k r\ | j | � n | j | | � n d S( Nt _provider( R< R� R= R t remove_providert add_provider( R� R� t newprovidert subtypet prov( ( s! /usr/share/authconfig/authinfo.pyt changeProvider s c C s | j s t S| j r% | j r% t Sy | j j d � } Wn& t j k rc | j j d � } n X| j r� | j r� | j d k r� | j d d � n( y | j d � Wn t j k r� n X| j j | � | ry | j j t t j � Wqt k rqXn t S( Nt pamt sssdt pam_cert_authR% ( R� R% R� RI t get_serviceR� t NoServiceErrort new_serviceR] R� Rd t set_optiont remove_optionR= t save_serviceR� R� R4 R R= ( R� t write_configR ( ( s! /usr/share/authconfig/authinfo.pyt writeSSSDPAM s* ! c C s� | j s t St t j | j � | j t � | j r; t S| j s� | j sQ t Sy | j j t � | _ Wq� t j k r� | j j t � | _ q� Xn | j } y | j j d � Wn$ t j k r� | j j d � n X| j j d � t } | j r+t } | j | d d � | j | d d � n | j r]| j | d d � | j | d d � n2 | j r�| j | d d � | j | d d � n x� t D]� \ } } y� t | | � } | d k r�t | � } n t | � t k r�| j | | � nH t | � t k r/| r | j | | � q<| j | � n | j | � Wq�t j k rSq�Xq�W| j j! | � | r�| j j" | j# � � n | j j$ | j# � � y | j j% t t j& � Wn t' k r�n Xt S( Nt autofsR� t idRx Rn t chpassR3 (( R� R% R� R4 R R� R$ R Rb R� RI t new_domainR7 R� t DomainAlreadyExistsErrorR6 R R R t activate_serviceR_ R R` Ra R> R� R t typeRh R R' R! R= t save_domaint activate_domaint get_namet deactivate_domainR� R R= ( R� R� t activateR� t optionR� ( ( s! /usr/share/authconfig/authinfo.pyR� 1 sj c C s� | j d k r t St t j | j � d } d } d } | j t d � k rk | d 7} | d 7} d } n t d | j d | d | g � t S( Ns /usr/sbin/gdm-safe-restartt noneR� s ,/etc/pkcs11/lockhelper.sh -locks& ,/etc/pkcs11/lockhelper.sh -deactivatet lock_screens use_module=s ins_action=s rm_action=( Rd R R% R� t CFG_PAM_PKCS11R R� Rc R� R� ( R� t insactt rmactRF ( ( s! /usr/share/authconfig/authinfo.pyR� w s c C s0 d } d } d } t t j | j � t t j | j � t j j t t j � } t j j | � s� | j r~ t j | � q� t Sn d t j d � d } d } | j s� | j r� | | 7} d } | | 7} d } | d 7} | d 7} n | j r6| j r6| | 7} d } | | 7} d } | d 7} | d 7} n | j s[| j r�| j r�| j r�| | 7} d } | | 7} d } | d 7} | d 7} n d } | j t d � k r�| | 7} d } | | 7} d } | d 7} | d 7} n y t j t t j � Wn t k rn Xy t j t t j � Wn t k r;n X| d k r z; t t t j d � } | j � | j | � | j � Wd y | r�| j � n Wn t k r�n XXz; t t t j d � } | j � | j | � | j � Wd y | r| j � n Wn t k rn XXn t j d � t S( NRI s # Generated by authconfig on s %Y/%m/%d %H:%M:%Ss s [org/gnome/login-screen] s& enable-smartcard-authentication=false s7 /org/gnome/login-screen/enable-smartcard-authentications% enable-password-authentication=false s7 /org/gnome/login-screen/enable-password-authentication s( enable-fingerprint-authentication=false s: /org/gnome/login-screen/enable-fingerprint-authentication s3 [org/gnome/settings-daemon/peripherals/smartcard] R� s removal-action='lock-screen' s1 /org/gnome/settings-daemon/peripherals/smartcard i� s dconf update( R R� t CFG_DCONFR R� t CFG_DCONF_LOCKSR4 R� t dirnameR R R] t makedirsR% t timet strftimeRd Rf Re Rc R� R) R; R� R R� R R< R= R� ( R� R� RK t lockst locksdirt headert groupHeader( ( s! /usr/share/authconfig/authinfo.pyR� � s� % c C so d } | d 7} | d t j d � d 7} | d 7} | d 7} | d 7} | j rv | d 7} | | j 7} | d 7} n | j r� | d 7} | | j j d d � 7} | d 7} n | j r� | d 7} | | j 7} | d 7} n | j r | d 7} | | j 7} | d 7} n | j r6| d 7} | | j 7} | d 7} n | j rc| d 7} | | j 7} | d 7} n | j r�| d 7} | | j 7} | d 7} n | j r�| d 7} | | j 7} | d 7} n | j r�| d 7} | d 7} n | d 7} | d 7} | d 7} | t t | j � � j � 7} | d 7} | d 7} | t t | j � � j � 7} | d 7} | d 7} | d 7} | S( Ns #--authconfig--start-line-- s s # Generated by authconfig on s %Y/%m/%d %H:%M:%SsF # DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--) sE # Any modification may be deleted or altered by authconfig in future s workgroup = s password server = R R s realm = s security = s idmap config * : range = s winbind separator = s template homedir = s template shell = s' kerberos method = secrets and keytabs! kerberos method = secrets onlys winbind use default domain = s winbind offline logon = s #--authconfig--end-line-- ( R; R< Rg RZ R RY RX Rh Ri Rj Rk Rn R' Rh Rl R! Rm ( R� RK ( ( s! /usr/share/authconfig/authinfo.pyt paramsWinbind� sh c C s> d } x' | D] } t | | � r d } Pq q W| | 7} | S( NRI RK ( RV ( R� R R� R� RK RB ( ( s! /usr/share/authconfig/authinfo.pyt checkLineWinbind s c C s$ t } t } d } t t j | j � d d d d d d d d d d d d d d g } d } d } z�t t t j d � } x.| j D]#} | j � } | r� t | d � r� t } q� q� n t | d � r� t } q� n t | d � s� t | d � r| | 7} q� n t | d � } | rsd | k rs| j d � d j � } | | 7} | d k r� | | j � 7} t } q� q� n | d k r�| | j | | | � 7} q� n | | 7} q� W| s�| d 7} | | j � 7} n | j � | j | � | j � Wd y | r | j � n Wn t k r n XXt S( NRI RT s password serverRQ RU s domain logonss domain masters idmap uids idmap gids winbind separators template homedirs template shells winbind use default domains winbind offline logons kerberos methodi� s #--authconfig--end-line--s #--authconfig--start-line--RK R R RL i RM s [global] ( R R� RN R R� R R� R R� R� R R% R R R! RA RB R R� R R< R= ( R� t authsectiont wroteauthsectionR R� R� RK R R� R# ( ( s! /usr/share/authconfig/authinfo.pyR� ( sb c C s� d } d } d } t } t } t } t } t } t } t } t } d } d } t t j | j � z�t t t j d � } | j r� | d 7} n | d 7} | j r� | d 7} n | } | j r� | d 7} n | j r� | d 7} n | j r� | d 7} n | j r| d 7} n | j s*| j s*| j rA| d 7} | d 7} n | j rW| d 7} n | j rw| j rw| d 7} n | j r�| d 7} n | j r�| d 7} n | j r�| d 7} n | j r�| d 7} n | } | j r�| j d d � } n | } | j r| d 7} n t j t t j � s`| j rK| j rK| j d d � } q`| j d d � } n | d 7} | j r�| d 7} n | j r�| d 7} n | j r�| d 7} n | j r�| d 7} n | j r�| d 7} n | j s�| d 7} n | j! r| d 7} n x| j" D] } | j# � } t$ | d � r_| s| d 7} | | 7} | d 7} t% } qqt$ | d � r�| s| d 7} | | 7} | d 7} t% } qqt$ | d � r�| s| d 7} | | 7} | d 7} t% } qqt$ | d! � r| s| d" 7} | | 7} t% } qqt$ | d# � rQ| s| d$ 7} | | 7} | d 7} t% } qqt$ | d% � r�| s| d& 7} | | 7} | d 7} t% } qqt$ | d' � r�| s| d( 7} | | 7} | d 7} t% } qqt$ | d) � r| s| d* 7} | | 7} | d 7} t% } qq| | 7} qW| sC| d 7} | | 7} | d 7} n | sj| d 7} | | 7} | d 7} n | s�| d 7} | | 7} | d 7} n | s�| d$ 7} | | 7} | d 7} n | s�| d& 7} | | 7} | d 7} n | s| d( 7} | | 7} | d 7} n | s-| d* 7} | | 7} | d 7} n | j& � | j' | � | j( � Wd y | rh| j) � n Wn t* k r|n XXt% S(+ NRI i� s dbs filess altfiless directoriess odbcbinds nispluss niss ssss ldapbinds ldaps hesiodbinds hesiods dbibinds dbbindt filesR] s winbindR} R� s mdns4_minimal [NOTFOUND=return]s dnss winss myhostnames passwd:s passwd: s s shadow:s shadow: s group:s group: s initgroups:R s netgroup:s netgroup: s automount:s automount: s hosts:s hosts: s services:s services: (+ R R R� Rg R R� R� R Ro R� Rp Rr Rs Rt R~ RI Rb Ru R_ Rv Rw Rx Ry Rz R Rq R4 R� t PATH_LIBSSS_AUTOFSR R| R R{ R} R� R� R R% R R� R R< R= ( R� t userst normalt hostst wrotepasswdt wrotegroupt wroteshadowt wrotenetgroupt wroteautomountt wrotehostst wroteinitgroupst wroteservicesR� RK t servicest netgroupR R� ( ( s! /usr/share/authconfig/authinfo.pyR� p s: c C sf t | t } | t } | t } d } | rX| rXd } | d k r� | d k r� | r� | j rj t } n t } d j t � } q� | j r� t } q� n | d k r� | d k r� | j r� t } q� t } n | d k r]| d k r| t k r| j rZt } qZq]| d k s| d k r]| j d k rZ| t d } | j | d <d j | � } qZq]n | d k r�| d k r�| j s�| j s�| j r�| j r�t } n | d k r�t j d t d f t j � r�d } n | d k r�| d 7} t } n | d | | | f 7} | ro| | j k rot j d t | f t j � ro| j t d t | f � � t | j | <n | d k r�| j } n | d k r�| j! } n | d k r�| j" } n | d k r�| j# } n | d k s�| d k r�| j$ } n | d k r | j% } n | d k rG| d k rG| j rG| t t& k rGd } n | rn| t rnd j | t � } n | d k r�| j' r�| d k r�| d 7} n | d k r�| j( r�| d 7} n | d k r�| d k rd| j) r| j) d k r| d | j) 7} n | j* r | d | j* 7} n | j+ r5| d 7} n | j rK| d 7} n | j, rd| d 7} qdn | d k r�| j, r�| d 7} q�n | d k r�| j- s�| j. s�| j s�| j/ r�| d! 7} q�q�n | d" k r| d k rd j | t � d | j0 } n | d k r>| d k r>| t1 k r>| j2 d# d$ � } n | rX| d | 7} qXn | d% 7} | S(& NRI Rw Rn R Rx Ro Rv i i R| R� s %s/pam_%s.sot oddjob_mkhomedirR� t -s %-12s%-13s pam_%s.sos_ Authentication module %s/pam_%s.so is missing. Authentication process might not work correctly.R� R� R{ R� R} t forward_passR� Rq s cached_logins# krb5_auth krb5_ccache_type=KEYRINGRi s rounds=s shadows niss nulloks broken_shadowRt R` Ra s (3 t pam_stackst STACKt LOGICt NAMER` t LOGIC_FORCE_PKCS11_KRB5t LOGIC_FORCE_PKCS11R t argv_force_pkcs11_autht LOGIC_PKCS11_KRB5R] t LOGIC_IGNORE_AUTH_ERRt LOGIC_IGNORE_UNKNOWNt LOGIC_SKIPNEXTt LOGIC_SKIPNEXT3R� R t ARGVR� R� Rb Rt t LOGIC_SUFFICIENTR4 R� t AUTH_MODULE_DIRt X_OKR t module_missingR� R� R% R� R� R� R� R� R� t argv_sssd_missing_nameRm Rn RO R� R� R� R� Ra R� R� t LOGIC_SKIPNEXT_ON_FAILURER ( R� R� t forcescardt warnR� t logicR� RK R� t argv( ( s! /usr/share/authconfig/authinfo.pyt formatPAMModule4 s� ! 3 ! !$ c C s� t j j | � } t j j | � } | r1 | s> | r� | r� y t j | � Wn t k rb n Xy t j | | � Wq� t k r� q� Xn d S( N( R4 R� R t islinkR) R; t symlink( R� R R R� R� ( ( s! /usr/share/authconfig/authinfo.pyt linkPAMService� s c C s} xv t t t t t g D]_ } t d | } t j j | � } t j j | � } | r[ | sh | r | r t | _ d Sq Wd S( Ns /pam.d/( Rr Ru t PASSWORD_AUTH_PAM_SERVICEt FINGERPRINT_AUTH_PAM_SERVICEt SMARTCARD_AUTH_PAM_SERVICERq R4 R� R Ro R R� ( R� R R� R� ( ( s! /usr/share/authconfig/authinfo.pyt checkPAMLinked� s c U C s[ d } d } t | j | j � z�t t | j d � } | d 7} | d 7} | d 7} | d 7} | j } | j } | j } t } | t k r� t } n | t k r� t } n | t k r� t } t } n | j o� | j d k } g } xt | D]�} | r | t | t k r | d 7} n | } | t s�| j rF| t d k s�| j r_| t d k s�| j rx| t d k s�| j r�| t d k s�| j r�| t d k s�| j r�| t d k s�| j r�| j r�| t d k r�| t t k s�| j rF| rF| t d k r&| t t k s�| t d k rF| t t k s�| j ri| j ri| t d k s�| r�| r�| t d k r�| t t k s�| r�| r�| t t k r�| t d k r�| t! t" k s�| r�| r�| t d k s�| r| r| r| t d k s�| r.| r.| t d k s�| rD| t d k s�| j# r]| t d k s�| j$ rv| t d k s�| j% r�| t d k s�| j s�| j s�| j& r�| t d k r�| t t k s�| j s�| j s�| j& r9| j' r9| t d k s)| t d k r9| t! t( k r9| j) r9| t t k s�| j* rb| t d k rb| t t+ k s�| j, r{| t d k s�| j- r�| t d k s�| j) r� | t t k r� | t d k r� | t! t. k r� | | j/ | | | � 7} q� q� W| j0 � | j1 | � | j2 � Wd y | r)| j3 � n Wn t4 k r=n XX| j5 | t6 d | � t S( NRI i� s #%PAM-1.0 s # This file is auto-generated. s/ # User changes will be destroyed the next time s authconfig is run. R s R~ s afs.krbR� Rt R� t epsRx Ry R� R} Rv Rw R� Rz R� R� R� R{ R� R� s /pam.d/(7 R R� R R� R� R Rf R] Re R t STANDARDR% t FINGERPRINTt SMARTCARDR� Rd t pam_modulesRX t MANDATORYR� RZ R� R� R� R� R� R` R� Rc t argv_krb5_sc_autht AUTHRa Rh RY Ra R� R� R� Rb Rt Ri R� R� t ACCOUNTR� R� t LOGIC_REQUISITERn R R� R R< R= Rq Rq ( R� R� t cfgt cfg_basenamet cfg_linkR� RK Rf R] Re Rk t use_sssd_smartcard_supportt prevmoduleR� ( ( s! /usr/share/authconfig/authinfo.pyt writePAMService� s� # #, # ;*) c C s{ i | _ | j t t t t � | j t t t t � | j t t t t � | j t t t t � | j t t t t � t S( N( Rg R� Rw Rp t AUTH_PAM_SERVICE_ACRr t POSTLOGINRt t POSTLOGIN_PAM_SERVICE_ACRu t PASSWORD_ONLYt CFG_PASSWORD_PAMt PASSWORD_AUTH_PAM_SERVICE_ACRr Rx t CFG_FINGERPRINT_PAMt FINGERPRINT_AUTH_PAM_SERVICE_ACRs Ry t CFG_SMARTCARD_PAMt SMARTCARD_AUTH_PAM_SERVICE_ACRt R% ( R� ( ( s! /usr/share/authconfig/authinfo.pyR� s c C s� t t j | j � y t j t t j � } Wn t k rB t SX| j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d | j � | j d d � | j d | j � | j d | j � | j d | j � | j d | j! � | j d | j" � | j d | j# � | j d | j$ � | j d | j% � | j d | j& � | j d | j' � | j d | j( � | j d | j) � | j d | j* � | j d! | j+ � | j d" | j, � | j- d# � | j. � t/ S($ NR� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� i� (0 R� R� R R� R� R� R R= R t setBoolValueR� R� R� R� Ro Rw R_ Rt R� R� Rq Rn R~ R` Ra R] Rf Re RO R R� R� R� R� R� R� R� R� RB Rb R� R� R� R� R� R� R< R% ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� sT c C sq t t j | j � y t j t t j � } Wn t k rB t SX| j d | j � | j d � | j � t S( NR� i� ( R� R� R R� R� R� R R= R R� RL R� R< R% ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� : s c C s� | j } | j � | _ | _ | j rY | j rY | j rY | rY | j j d � qY n t � } t | � d k r� | j | k r� | d | _ n | j r� | j r� t | _ t | _ n d S( NR^ i ( RI R� R� R~ R� R� R� R� R Rd R� Rb R R% R� ( R� t oldimplicitt modules( ( s! /usr/share/authconfig/authinfo.pyt prewriteUpdateH s ! c C sd | j t � | j � | j t d � y�| j � } | oF | j � } | oX | j � } | j ry | os | j � } n | j s� | j r� | o� | j � } n | j s� | j r� | j d k r� | o� | j � } n | j r� | o� | j � } n | j r| o | j � } n | j s$| j r9| o3| j � } n | j sK| j r`| oZ| j � } n! | j r�| o{| j t � } n | o�| j � } | o�| j � } | o�| j � } | o�| j � } | o�| j � } | o�| j! � } Wn< t" t# f k r,t$ j% j& t' t$ j( � d � d � t) SXx0 | j* D]% } | j+ r7| j, j- | j+ � q7q7W| S( Ns /lastR� i s (. R� R% R� t setupBackupt PATH_CONFIG_BACKUPSR� R� R$ Rw R� R_ Ra R� R` R� RX R� R] R� Rt R� Rq R� RI R� R� R� R$ R� R� R� R� R� R� R; R= R� R� R� R' t exc_infoR R� R� R� t add( R� R� R1 ( ( s! /usr/share/authconfig/authinfo.pyR� V sL $ c C s� | j � | j t � | j � | j t d � t } yj xc | j D]X } | j | | � rE | j r{ | ou | j � } n | j r� | j j | j � q� qE qE WWn< t t f k r� t j j t t j � d � d � t SX| S( Ns /lasti s ( Ru R� R% R� R� R� R� R� R� R� R� R� R; R= R� R� R� R' R� R ( R� R� R� R1 ( ( s! /usr/share/authconfig/authinfo.pyt writeChanged s !$c C s� d } d } g } g } t j d g t j d g t j d g t j d g g } t j � } | sd d S| j d � s� | d 7} n | | j d � } d | } t j | t j t j � } xJ | D]B } | j t j k r� | j j j d � | _ t | � | _ q� q� Wd | } t j | t j t j � } | sXd | } t j | t j t j � } n x? | D]7 } | j t j k r_| j j | _ | j r�Pq�q_q_W| j rd | j } t j | t j t j � } x� | D]{ } | j t j k r�| j j j d � } | j j r"| d | j j 7} n | j rA| j d | 7_ qM| | _ q�q�Wd | j } t j | t j t j � } x� | D]{ } | j t j k r�| j j j d � } | j j r�| d | j j 7} n | j r�| j d | 7_ q�| | _ q�q�Wn x� | D]� } | d | } t j | | d t j � } xV | D]N } | j t j k r@| j | k r@d | d | _ | j d � | _ Pq@q@Wq Wd S( NRI t hst nsR� s _ldap._tcps _kerberos.t _kerbeross _kerberos._udp.R, R s _kerberos-adm._udp.i i ( t dnsclientt DNS_C_INt DNS_C_HSR� t getfqdnt endswithR- R� t DNS_T_SRVt dns_typet rdataR� R R2 R� R4 t DNS_T_TXTt dataR@ R� R< R> t DNS_T_SOAt dns_nameRJ RK ( R� t hostnamet qnamet resultsRO Rb R� t h( ( s! /usr/share/authconfig/authinfo.pyt probe� sx c C s d t | j � GHd GHd t | j � GHd t | j � GHd t | j � GHd | j GHd | j GHd t | j � GHd t | j � GHd | j GHd | j GHd t | j � GHd | j GHd | j GHd t | j � GHd t | j � GHd | j GHd | j GHd | j GHd | j GHd | j GHd | j GHd t | j � GHd t | j � GHd t | j � GHd t | j � GHd t | j � GHd GHd t | j � GHd | j GHd t | j � GHd | j GHd! t | j � GHd" | j GHd# t | j! � GHd$ | j" GHd% t | j# � GHd t | j � GHd | j GHd | j GHd& | j$ pYd' GHd( t | j% o�| j& o�| j' d) k � GHd* t | j% o�| j& o�| j' d) k � GHd+ t | j( � GHd, | j' GHd- | j) GHd. t | j* � GHd/ t | j+ � GHd0 t | j, � GHd | j GHd | j GHd | j GHd | j GHd1 t | j& � GHd2 t | j- � GHd3 t | j. � GHd4 t | j/ � GHd5 | j0 r�d6 p�d7 GHd8 | j1 GHd9 | j2 GHd: | j3 GHd; t | j4 � | j5 f GHd< t | j6 � | j7 f GHd= t | j8 � | j9 f GHd> t | j: � | j; f GHd? t | j< � | j= f GHd@ t | j> � | j? f GHdA t | j@ � GHd S(B Ns caching is %ss nss_files is always enableds nss_compat is %ss nss_db is %ss nss_hesiod is %ss hesiod LHS = "%s"s hesiod RHS = "%s"s nss_ldap is %ss LDAP+TLS is %ss LDAP server = "%s"s LDAP base DN = "%s"s nss_nis is %ss NIS server = "%s"s NIS domain = "%s"s nss_nisplus is %ss nss_winbind is %ss SMB workgroup = "%s"s SMB servers = "%s"s SMB security = "%s"s SMB realm = "%s"s Winbind template shell = "%s"s SMB idmap range = "%s"s nss_sss is %s by defaults nss_wins is %ss nss_mdns4_minimal is %ss myhostname is %ss% DNS preference over NSS or WINS is %ss pam_unix is always enableds shadow passwords are %ss! password hashing algorithm is %ss pam_krb5 is %ss krb5 realm = "%s"s krb5 realm via dns is %ss krb5 kdc = "%s"s krb5 kdc via dns is %ss krb5 admin server = "%s"s pam_ldap is %ss LDAP schema = "%s"R2 s pam_pkcs11 is %sR s SSSD smartcard support is %ss# use only smartcard for login is %ss smartcard module = "%s"s smartcard removal action = "%s"s pam_fprintd is %ss pam_ecryptfs is %ss pam_winbind is %ss pam_sss is %s by defaults! credential caching in SSSD is %ss6 SSSD use instead of legacy services if possible is %ss IPAv2 is %ss IPAv2 domain was %sjoineds not RI s IPAv2 server = "%s"s IPAv2 realm = "%s"s IPAv2 domain = "%s"s pam_pwquality is %s (%s)s pam_passwdqc is %s (%s)s pam_access is %s (%s)s pam_faillock is %s (%s)s0 pam_mkhomedir or pam_oddjob_mkhomedir is %s (%s)s' Always authorize local users is %s (%s)s; Authenticate system accounts against network services is %s(A R� RH Rz Ro Rw RJ RK R_ R6 R2 R4 Rt RN RL Rs Rq Rg RZ RX RY Rk Rh R~ R{ R| R} R R� RO R` R@ R[ R< R\ R> Ra R8 R] R� Rd Rf Rc Re R� R� RB R� Rb R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� ( R� ( ( s! /usr/share/authconfig/authinfo.pyt printInfo� s� +* c C su x. t t t t f D] } t | j | j � q W| j rW t j d � t j d � n t j d � t j d � t S( Ns /usr/sbin/pwconvs /usr/sbin/grpconvs /usr/sbin/pwunconvs /usr/sbin/grpunconv( t CFG_SHADOWt CFG_PASSWDt CFG_GSHADOWt CFG_GROUPR� R R� R� R4 R� R% ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� 0 s c C s� d } | j s | j r�| j r�| j j d d � d j d d � d j d d � d } | j } | j } | s{ d } n | d k r� | d k r� d St d | r� d p� d | | r� d p� d | | j f } | r� t j j d | � n | j s� | r t | | d | j � \ } } n( t | g d t �} | j � | j } | rp| d k r�| j t d � � q�q�| d k r�t d � } | d | 7} | j | � q�n | d k S( Ni R i R s R� R� s join %s%s %s%s -U %ss -w RI s -S s [%s] s sword:R� s' Winbind domain join was not successful.s] Winbind domain join was not successful. The net join command failed with the following error:s ( Rq R� R� RZ R Rg RX t PATH_WINBIND_NETR� R� R� R� R� R� R% R� R� R� R� ( R� R� R� R� R� t protocolt cmdR� R� t errmsg( ( s! /usr/share/authconfig/authinfo.pyt joinDomain< s8 9 ! c C s� d } | j r�| j } | j } | j } | j } | j } | j rN d } n d } t d | rf d pi d | | rx d p{ d | | r� d p� d | | r� d p� d | | | r� d p� d f } | rt j j d | � t | g d t �} | j � | j } n t | | d | � \ } } | d k r5t | _ n | r`| d k r�| j t d � � q�q�| d k r�t d � } | d | 7} | j | � q�n | d k S( Ni s -NRI s! --noac %s%s %s%s %s%s %s%s %s %ss --domain=s --server=s --realm=s --principal=s --unattendeds -Ws [%s] R� s% IPAv2 domain join was not successful.se IPAv2 domain join was not successful. The ipa-client-install command failed with the following error:s ( Rb R� R� R� R� R� R� t PATH_IPA_CLIENT_INSTALLR� R� R� R� R% R� R� R� R� R� R� ( R� R� R� R� R� RQ t principalRq t nontpR� R� R� R� ( ( s! /usr/share/authconfig/authinfo.pyt joinIPADomain_ sB c C s t d } t j | � d S( Ns --uninstall --noac --unattended( R� R4 R� ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyt uninstallIPA� s c C sX | sT | j r, t j d � t j d � qT y t j d � WqT t k rP qT Xn t S( NR! ( RH R� R� R1 R; R% ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� � s c C sc | j r� | j r� | s/ t j d | j � n yA t j d � t j t � t j d � | so t j d � n Wn t k r� n XyA t j t � t j d � | s� t j d � t j d � n Wq_t k r� q_Xn� | s� t j d � n yY t j d � t j t � | s=y t j d � Wq=t k r9q=Xn t j d � Wn t k r^n Xt S( Ns /bin/domainname sG [[ $(getsebool allow_ypbind) == *off* ]] && setsebool -P allow_ypbind 1t rpcbindt ypbinds /bin/domainname "(none)"sF [[ $(getsebool allow_ypbind) == *on* ]] && setsebool -P allow_ypbind 0( Rt RL R4 R� R� t PATH_RPCBINDR� R� R1 R; t PATH_YPBINDR� R� R% ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� � sB c C s� t | j s | j o | j t d | � | j rZ y t j d � Wq t k rV q Xn% y t j d � Wn t k r~ n Xt S( Nt nslcdse [[ $(getsebool authlogin_nsswitch_use_ldap) == *off* ]] && setsebool -P authlogin_nsswitch_use_ldap 1sd [[ $(getsebool authlogin_nsswitch_use_ldap) == *on* ]] && setsebool -P authlogin_nsswitch_use_ldap 0( R� R_ Ra RI t PATH_NSLCDR4 R� R; R% ( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� � s c C s# t | j p | j t d | � d S( NR� ( R� Rq R� t PATH_WINBIND( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� � s c C s� | j r | j pE | j r- t j j t � pE | j oE t j j t � } | j pf | j pf | j pf | } t | t d | p� | o� | j p� | j p� | j � d S( NR ( R~ R� R4 R� t existst PATH_SSSD_CONFIGRI R� Rb R� t PATH_SSSD( R� R� t explicitenableR� ( ( s! /usr/share/authconfig/authinfo.pyR� � s c C sB | j r> t j d t d f t j � r> t t t d | � n d S( Ns %s/pam_%s.soRT t oddjobd( R� R4 R� Re Rf R� R% t PATH_ODDJOBD( R� R� ( ( s! /usr/share/authconfig/authinfo.pyR� � s c C s8 x | j D] } | | � q W| j r4 | j � n d S( N( R� R� R� ( R� R� R� ( ( s! /usr/share/authconfig/authinfo.pyt post� s c C sx | j s | j rt y t j | j � Wn> t k rf \ } } | t j k rg t j | j d � qg n Xt | j � St S( Ni� ( R_ Ra R4 R� R: R; RB t ENOENTR R� R ( R� R� R� ( ( s! /usr/share/authconfig/authinfo.pyt testLDAPCACerts� s c C sE | j s | j rA | j s* d | j k rA t j d | j � n d S( Ns ldaps:s /usr/sbin/cacertdir_rehash ( R_ Ra R6 R2 R4 R� R: ( R� ( ( s! /usr/share/authconfig/authinfo.pyt rehashLDAPCACerts� s c C s� | j s t S| j � yW t j | j � } t | j d t d � } | j | j � � | j � | j � Wn. t t t f k r� | j t d � � t SX| j � t S( NR� i� s Error downloading CA certificate( R� R R� t urllib2t urlopenRH R: t LDAP_CACERT_DOWNLOADEDR� R� R< R= R; R+ R� R� R� R% ( R� t readft writef( ( s! /usr/share/authconfig/authinfo.pyt downloadLDAPCACert� s c C s� | d d k r! t d | } n | | _ t | � s� yQ t j | � } x; | D]3 } y t j | d | � WqO t k r� qO XqO WWq� t k r� q� Xn d S( Ni R� s /backup-( R� R� R� R4 R� R) R; ( R� R R R> ( ( s! /usr/share/authconfig/authinfo.pyR� s c C s@ | j | � t } x& t D] } | j | j � o5 | } q W| S( N( R� R% R� R R� ( R� R R� R� ( ( s! /usr/share/authconfig/authinfo.pyt saveBackup s c C sQ | d d k r! t d | } n t } x# t D] } | j | � oF | } q. W| S( Ni R� s /backup-( R� R% R� R ( R� R R� R� ( ( s! /usr/share/authconfig/authinfo.pyt restoreBackup s c C s | j t d � S( Ns /last( R� R� ( R� ( ( s! /usr/share/authconfig/authinfo.pyt restoreLast' s (T R� R� R� R� R� R� R� R� R� R� R� R R R R R R% R/ RC RJ RQ RS RW Ro R" Rv Rs R� R� R� R R� R� R� R$ R� R� R� R� R� R� R� R� R� R� R R$ R� R� R� RA RB R� R� Rn Rq Ru R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� ( ( ( s! /usr/share/authconfig/authinfo.pyR� % s� � * 9 K " 1 * + 7 � � " U u 5 B \ � F Y : H � b T / ) S L # ( $ ( ( ( ( ( ( s ldapServers ldap_uri( s ldapBaseDNR5 ( s enableLDAPSR7 ( s ldapSchemas ldap_schema( s ldapCacertDirR; ( s kerberosKDCR= ( s kerberosAdminServerR? ( s kerberosRealmRA ( s enableCacheCredsRC ( s enableCacheCredss krb5_store_password_if_offline( (� R t reR4 R� R7 R� R� R� R� R� R� R� RB R� R� R; R� t subprocessR t gettextt lgettextR� R� t ImportErrorR Rq Rr R� Ru R� Rr R� Rs R� Rt R� R7 R' t globalst LIBDIRRe t PATH_PWCONVR� R# R� R� R� R� R� t PATH_SEBOOLt PATH_SCEVENTDR� t PATH_LIBNSS_DBt PATH_LIBNSS_LDAPR� R t PATH_LIBNSS_NISt PATH_LIBNSS_HESIODt PATH_LIBNSS_ODBCBINDt PATH_LIBNSS_WINBINDt PATH_LIBNSS_WINSt PATH_LIBNSS_SSSt PATH_PAM_KRB5t PATH_PAM_LDAPt PATH_PAM_WINBINDt PATH_PAM_PKCS11t PATH_PAM_FPRINTDt PATH_PAM_SSSRF R R� R� R� R� R� R� t LOGIC_REQUIREDR Rd t LOGIC_OPTIONALR` R_ t LOGIC_PKCS11R\ R^ R[ Ra Rb t LOGIC_ALWAYS_SKIPRi R R R R R R" R$ R) R* R+ R3 RD RH RM RP RR RV t argv_unix_autht argv_unix_passwordt argv_afs_autht argv_afs_passwordt argv_pwquality_passwordt argv_passwdqc_passwordt argv_eps_autht argv_eps_passwordt argv_fprintd_autht argv_pkcs11_authR] Rh t argv_krb5_authR| t argv_krb5_passwordt argv_ldap_autht argv_ldap_passwordt argv_otp_autht argv_succeed_if_autht argv_succeed_if_accountt argv_succeed_if_sessiont argv_succeed_if_nonlogint argv_winbind_autht argv_winbind_passwordt argv_sss_autht argv_sss_passwordt argv_keyinit_sessiont argv_ecryptfs_autht argv_ecryptfs_passwordt argv_ecryptfs_sessiont argv_succeed_if_not_gdmt argv_lastlog_gdmt argv_lastlog_not_gdmt argv_faildelayR� t rangeR} R~ t SESSIONt PASSWORDRW R{ RX RY RZ Rc Rw R� R� Rx Ry R� Rz R% R R� t DEFAULT_DNS_QUERY_SIZEt compileR# R� R� R� t readlinkR� R; R� R� R� R� R� R� R� R� R� R� R R" R$ R% R� R� R R R R R� R t CFG_KRBR4 RN Rg R� Rp Rt R� R� R� R� R� R R. R" R4 R� R� R� R� R7 R8 R� R> R� ( ( ( s! /usr/share/authconfig/authinfo.pyt <module> s� ( Z #S 7i